Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2020/07/08 16:42:53 fuzzer started 2020/07/08 16:42:53 dialing manager at 10.128.0.105:36183 2020/07/08 16:42:53 syscalls: 3114 2020/07/08 16:42:53 code coverage: enabled 2020/07/08 16:42:53 comparison tracing: enabled 2020/07/08 16:42:53 extra coverage: enabled 2020/07/08 16:42:53 setuid sandbox: enabled 2020/07/08 16:42:53 namespace sandbox: enabled 2020/07/08 16:42:53 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/08 16:42:53 fault injection: enabled 2020/07/08 16:42:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/08 16:42:53 net packet injection: enabled 2020/07/08 16:42:53 net device setup: enabled 2020/07/08 16:42:53 concurrency sanitizer: enabled 2020/07/08 16:42:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/08 16:42:53 USB emulation: enabled 2020/07/08 16:42:57 suppressing KCSAN reports in functions: '__ext4_new_inode' '__send_signal' 'fsnotify' 'wbt_wait' 'pcpu_alloc' 'n_tty_receive_buf_common' 'generic_write_end' 'do_syslog' 'shmem_file_read_iter' '__filemap_fdatawrite_range' '__find_get_block' 'ext4_mark_iloc_dirty' 'tick_sched_timer' 'xas_clear_mark' 'add_timer_on' 'ext4_mpage_readpages' '__add_to_page_cache_locked' 'futex_wait_queue_me' 'tick_nohz_stop_tick' 'kauditd_thread' 'ps2_do_sendbyte' 'ext4_free_inode' 'ext4_setattr' 'vfs_readlink' 'ext4_free_inodes_count' 'dd_has_work' 'lookup_fast' '__delayacct_blkio_end' 'expire_timers' 'exit_mm' 'shmem_mknod' 'ext4_mb_find_by_goal' 'blk_mq_sched_dispatch_requests' '__mnt_want_write_file' '__ext4_update_other_inode_time' 'blk_mq_dispatch_rq_list' '__blk_mq_sched_dispatch_requests' 'xas_find_marked' 'complete_signal' 'do_sys_poll' '__xa_set_mark' 'shmem_getpage_gfp' 'shmem_unlink' '__ptrace_unlink' 'page_counter_charge' 'ext4_sync_file' 'wbt_issue' '__mod_timer' 'snd_rawmidi_poll' '__delete_from_page_cache' '__xa_clear_mark' 'find_get_pages_range_tag' 'do_signal_stop' 'io_sq_thread' 'audit_log_start' 'do_readlinkat' 'alloc_pid' 'do_nanosleep' 'blk_mq_rq_ctx_init' 'ext4_write_end' 'do_epoll_wait' 16:44:03 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200080, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x4) r1 = socket$isdn(0x22, 0x3, 0x26) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x54880, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)={0x0, 0x7f, 0x1, &(0x7f0000000100)=0x7f}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x6, 0x5, 0x3, 0x200, 0x1, [{0x7, 0x8, 0x0, [], 0x401}]}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mISDNtimer\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1000}, 0x8) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x28102, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3ff}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000003c0)={r4, 0xd4, "66dd39004954b6438b8359ddb7d5b1508bc1686914170b8ff215a7b3b295d2f775ccccbdd13c1822dd344c6ea68349e406b6e665d5b816409d633d0fc113850dede7e18158f9aa14ed444fb251721681146f30c97eec76b9c5af4c23cd1debe78d08aa7398654cd9bf9508e56fdd42effd50a2ebf4d63942c33c2e228124d954833c49e18b783ee41bf8d4ff85155807bd8acf8063f08f183a17247a663b9cae5b58ed9cb6dd13d9157b604b53b862fcc274e97177f84071765349a6e10a2ac00dde1b41924692095714a9a3a1cd90d42d981c7a"}, &(0x7f00000004c0)=0xdc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r5, &(0x7f0000000500)=@known='system.advise\x00', &(0x7f0000000540)=""/30, 0x1e) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsu\x00', 0x40000, 0x0) write$evdev(r6, &(0x7f0000000640)=[{{}, 0x0, 0x82c, 0xff}, {{0x77359400}, 0x16, 0x0, 0x9}, {{0x0, 0xea60}, 0x1f, 0x2, 0x9}, {{0x77359400}, 0x5, 0x3, 0x8}, {{0x77359400}, 0x1f, 0x4, 0x7}, {{0x77359400}, 0x2, 0xff, 0x6}, {{0x0, 0x2710}, 0x16, 0x54f2, 0x4}, {{0x0, 0x2710}, 0x0, 0x1, 0x1}, {{0x77359400}, 0x12, 0x7, 0xaf}], 0xd8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000780)=0x1, 0x4) syzkaller login: [ 101.312813][ T8662] IPVS: ftp: loaded support on port[0] = 21 [ 101.375862][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 101.407803][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.414884][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state 16:44:04 executing program 1: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = getgid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, r1, r2, r3, r4, 0x1c5, 0x5}, 0x3, 0x800, 0x6455, 0x9, 0x0, 0x0, 0x6}) r5 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xffffffff, 0x200282) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x20004080) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000300)={0x8, 0x101, 0xb, {0x9, 0x6, 0x0, 0x6}}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000380)={0x9d0000, 0x5, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x64d036534c1401d1, 0x0, [], @value64=0xcb}}) ioctl$VIDIOC_S_AUDOUT(r8, 0x40345632, &(0x7f00000003c0)={0x4, "af44aae120c79c7c96e51747ba8d5e41f5085ab9af2e682408865321ca29e4b5", 0x1}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000400)) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000004c0)={0x9a0000, 0x200, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0xa10902, 0x0, [], @string=&(0x7f0000000440)=0x7}}) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000500)=0xf4240) ioctl$VIDIOC_S_EDID(r8, 0xc0285629, &(0x7f0000000580)={0x0, 0x8001, 0x1, [], &(0x7f0000000540)=0xa4}) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000600)='tls\x00', 0x4) [ 101.422653][ T8662] device bridge_slave_0 entered promiscuous mode [ 101.431445][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.438791][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.446797][ T8662] device bridge_slave_1 entered promiscuous mode [ 101.462342][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.473324][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.490934][ T8662] team0: Port device team_slave_0 added [ 101.498113][ T8662] team0: Port device team_slave_1 added [ 101.512970][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.520260][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.546823][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.558676][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.574036][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.600616][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.616331][ T8816] IPVS: ftp: loaded support on port[0] = 21 16:44:04 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x16, 0x33, 0x0, 0xc, 0xb, 0x0, 0x4, 0xc5, 0x1}) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0x11, "48b8bc2a312b6bd7"}, 0xa, 0x3) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x3, 0x8, 0x4, 0xff8, 0x3, [{0x8, 0x6, 0x5, [], 0x5}, {0x4, 0x10000, 0xce7, [], 0x8a}, {0xfa, 0x1, 0x3, [], 0x200}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0xc00, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x240, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000380)={0x3, 0x0, 0xbc, 0x100}) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x3, 0x402400) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000440)={0x6, 0xffffffffffffffff, 0x1}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ocfs2_control\x00', 0xa0000, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000500)) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000005c0)={0x2, 0xffffffff, 0x164e}) [ 101.698019][ T8662] device hsr_slave_0 entered promiscuous mode [ 101.745655][ T8662] device hsr_slave_1 entered promiscuous mode 16:44:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/161, 0xa1}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2}, 0x10002) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004840)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000004a80)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004a40)={&(0x7f0000004880)={0x1b0, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5179}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x55}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3bd351eb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x201}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf41}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x125e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x84}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x722}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004040}, 0xd0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000004ac0)) r3 = open(&(0x7f0000004b00)='./file0\x00', 0x400840, 0x20) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000004b40)) r4 = dup(r3) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000004b80)={0x400, 0x9, 0x7fff, 0x3}) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000004bc0)='/dev/input/mice\x00', 0x50000) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r6 = socket(0x10, 0x1, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'team0\x00', 0x0}) getsockname$packet(r5, &(0x7f0000004d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004d80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004f80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004f40)={&(0x7f0000004dc0)={0x154, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) r9 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$notify(r9, 0x402, 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000004fc0)) [ 101.829959][ T8848] IPVS: ftp: loaded support on port[0] = 21 [ 101.877832][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 101.981974][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.995536][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.003009][ T8816] device bridge_slave_0 entered promiscuous mode [ 102.011484][ T8662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.069501][ T9005] IPVS: ftp: loaded support on port[0] = 21 [ 102.081916][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 102.099690][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.107939][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state 16:44:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe2877b31a1f905c8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb50164f3db9447af}, 0x4055) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000001c0)=""/18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r3, &(0x7f00000046c0), &(0x7f0000004740)=0x6e) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004780)='/dev/sequencer2\x00', 0x88000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000004800)={&(0x7f00000047c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) prctl$PR_GET_FP_MODE(0x2e) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004840)='/dev/bsg\x00', 0x10000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000005280)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005240)={&(0x7f00000048c0)={0x97c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xffff}, @NL80211_ATTR_IE={0x699, 0x2a, "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"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_IE={0x2ae, 0x2a, "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"}]}, 0x97c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000052c0)='/dev/vga_arbiter\x00', 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000005300)=0xfff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000005340)='/dev/nullb0\x00', 0x4300, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000005380)) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000053c0)={0x3f, 0x81, 0x2}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000005400)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000005480)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) [ 102.116318][ T8816] device bridge_slave_1 entered promiscuous mode [ 102.123356][ T8662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.198532][ T8662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.252132][ T8662] netdevsim netdevsim0 netdevsim3: renamed from eth3 16:44:05 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80000, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x10001}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00', 0x200}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={r2, 0x7}, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000500)={0x8, [0x600d, 0x6, 0x7, 0x200, 0x8, 0x101, 0x6, 0xfffe]}, 0x14) sendmsg$inet_sctp(r3, &(0x7f0000001680)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00', 0x10000}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000580)="cefe646c23d83868076bbf4e8dde67b00052238ecba2c3d3d43674b281eb76ae5886f56978750a3ba810e780c42e3b8e966df9a464337b1c", 0x38}, {&(0x7f00000005c0)="3def0bc127b4a426127bb63b843f66c4ed48f66ff7541fd5a23c07a8bc4e46b6fa517e4728fda7c8512052501a8b6c14735da5fad6937f4c", 0x38}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000001640)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x40000}, 0x40850) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000016c0)=0x4) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/mixer\x00', 0x24000, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000001740)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001780)=0xdc2, 0x4) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000017c0)=""/74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=0xffffffffffffffff, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001880)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x7fffffff, @loopback, 0x3ff}, 0x2, [0x0, 0xe596, 0x9, 0x2, 0xffffffff, 0x8000, 0x6, 0x5]}, 0x5c) fallocate(r4, 0x31, 0xe, 0xffff) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/sequencer\x00', 0x28000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000002d00)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @private=0xa010100}], 0x20) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002d40)=0x0) getpgrp(r6) [ 102.306010][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.323889][ T9107] IPVS: ftp: loaded support on port[0] = 21 [ 102.326979][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.381864][ T8816] team0: Port device team_slave_0 added [ 102.421383][ T8816] team0: Port device team_slave_1 added [ 102.472377][ T9005] chnl_net:caif_netlink_parms(): no params data found [ 102.497474][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.504783][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.532124][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.549126][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.556251][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.563748][ T8848] device bridge_slave_0 entered promiscuous mode [ 102.572933][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.580482][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.588566][ T8848] device bridge_slave_1 entered promiscuous mode [ 102.596640][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.604075][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.631855][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.687085][ T8816] device hsr_slave_0 entered promiscuous mode [ 102.705472][ T8816] device hsr_slave_1 entered promiscuous mode [ 102.745402][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.753169][ T8816] Cannot create hsr debugfs directory [ 102.766328][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 102.784356][ T9310] IPVS: ftp: loaded support on port[0] = 21 [ 102.818457][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.834733][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.842658][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.850229][ T9005] device bridge_slave_0 entered promiscuous mode [ 102.858621][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.866074][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.873754][ T9005] device bridge_slave_1 entered promiscuous mode [ 102.891225][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.899713][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.919699][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.927547][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.935013][ T9107] device bridge_slave_0 entered promiscuous mode [ 102.947058][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.974686][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.981828][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.989465][ T9107] device bridge_slave_1 entered promiscuous mode [ 102.997047][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.012907][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.020368][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.028846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.043065][ T8848] team0: Port device team_slave_0 added [ 103.051844][ T8848] team0: Port device team_slave_1 added [ 103.063881][ T9005] team0: Port device team_slave_0 added [ 103.085554][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.094176][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.103362][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.110407][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.118241][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.127117][ T9005] team0: Port device team_slave_1 added [ 103.135075][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.145281][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.174422][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.190194][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.197782][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.224620][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.236543][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.247945][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.259922][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.269448][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.278428][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.285469][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.309219][ T8816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.357076][ T8816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.409637][ T8816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.457057][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 103.465994][ T9107] team0: Port device team_slave_0 added [ 103.479944][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.487131][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.513889][ T9005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.526613][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.538980][ T8816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.587113][ T9107] team0: Port device team_slave_1 added [ 103.599552][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.606526][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.632995][ T9005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.644404][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.706841][ T8848] device hsr_slave_0 entered promiscuous mode [ 103.766060][ T8848] device hsr_slave_1 entered promiscuous mode [ 103.805179][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.812863][ T8848] Cannot create hsr debugfs directory [ 103.818732][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.825723][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.852512][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.864341][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.871583][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.897738][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.912418][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.920184][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.927831][ T9310] device bridge_slave_0 entered promiscuous mode [ 103.936792][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.944075][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.951921][ T9310] device bridge_slave_1 entered promiscuous mode [ 103.959704][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.969633][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.978910][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.026674][ T9005] device hsr_slave_0 entered promiscuous mode [ 104.085443][ T9005] device hsr_slave_1 entered promiscuous mode [ 104.125176][ T9005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.132821][ T9005] Cannot create hsr debugfs directory [ 104.196535][ T9107] device hsr_slave_0 entered promiscuous mode [ 104.235521][ T9107] device hsr_slave_1 entered promiscuous mode [ 104.295163][ T9107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.302714][ T9107] Cannot create hsr debugfs directory [ 104.339726][ T8662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.350527][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.362510][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.371140][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.379470][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.387800][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.396407][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.404725][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.418356][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.429358][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.443131][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.465966][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.473327][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.483390][ T8848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.540607][ T8848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.587153][ T8848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.640963][ T9310] team0: Port device team_slave_0 added [ 104.656896][ T8848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.718889][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.726620][ T9310] team0: Port device team_slave_1 added [ 104.770366][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.777552][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.804167][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.816737][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.823728][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.849934][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.864328][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.873093][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.892901][ T8662] device veth0_vlan entered promiscuous mode [ 104.907422][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.914261][ T9107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.958606][ T9107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.006674][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.014705][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.076916][ T9310] device hsr_slave_0 entered promiscuous mode [ 105.135404][ T9310] device hsr_slave_1 entered promiscuous mode [ 105.175161][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.182735][ T9310] Cannot create hsr debugfs directory [ 105.190618][ T8662] device veth1_vlan entered promiscuous mode [ 105.201425][ T9107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.247606][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.255521][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.263471][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.271629][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.297156][ T9107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.346912][ T9005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.388315][ T9005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.455951][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.467055][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.477962][ T9005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.519492][ T8662] device veth0_macvtap entered promiscuous mode [ 105.529594][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.538298][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.546189][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.554641][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.568834][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.579019][ T9005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.638686][ T8662] device veth1_macvtap entered promiscuous mode [ 105.646222][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.654309][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.662731][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.670807][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.679087][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.687807][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.696653][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.703683][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.740524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.749643][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.758886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.768656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.775838][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.783896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.794115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.802465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.809501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.817546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.826184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.834737][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.843500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.850665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.858429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.867182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.875684][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.883912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.892849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.900704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.917478][ T9310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.937478][ T9310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.977256][ T9310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.016472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.025305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.033816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.042802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.051245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.060325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.068852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.077237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.085561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.094057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.102740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.112871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.122987][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.135204][ T9310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.176435][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.185290][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.193520][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.202294][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.211374][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.223503][ T8848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.236368][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.251293][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.261622][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.269561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.279842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.288331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.298231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.319914][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.327867][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.341118][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.352885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.366728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.375421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.383601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.396829][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.408702][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.498943][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.507508][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.516156][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.523174][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state 16:44:09 executing program 0: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 106.592269][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.615495][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.624200][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.652475][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.659725][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.685580][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.702375][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.727103][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.745733][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.753985][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.772775][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.805931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.816656][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.826180][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.834697][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.844673][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.853381][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.862476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.871524][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.880296][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.900744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.908843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.917719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.925107][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.933146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.940808][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.949667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.959366][ T9005] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.967946][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.979311][ T8848] device veth0_vlan entered promiscuous mode [ 106.986856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.994378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.021481][ T8848] device veth1_vlan entered promiscuous mode [ 107.030125][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.037671][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.046303][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.054919][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.063525][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.070560][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.078431][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.087477][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.096122][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.103389][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.111950][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.121059][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.131080][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.139518][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.148170][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.156941][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.165688][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.174006][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.182847][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.191032][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.200187][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.208021][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.216009][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.223553][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.232931][ T8816] device veth0_vlan entered promiscuous mode [ 107.244679][ T8816] device veth1_vlan entered promiscuous mode [ 107.263970][ T8848] device veth0_macvtap entered promiscuous mode [ 107.275187][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.283115][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.291985][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.299373][ T12] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.308453][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.315912][ T12] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.327076][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.335165][ T12] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.344909][ T12] usb 1-1: config 1 interface 1 has no altsetting 0 [ 107.345247][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.360287][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.368588][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.376960][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.386329][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.395328][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.404602][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.427295][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.436886][ T8848] device veth1_macvtap entered promiscuous mode [ 107.455008][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.463091][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.471845][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.480599][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.491171][ T8816] device veth0_macvtap entered promiscuous mode [ 107.510621][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.523258][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.534262][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.544599][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.561741][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.569774][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.579791][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.588633][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.595776][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.603882][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.605072][ T12] usb 1-1: string descriptor 0 read error: -22 [ 107.612552][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.621701][ T12] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.628258][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.638348][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.644206][ T9103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.645750][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.667718][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.675346][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.684167][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.693052][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.697756][ T12] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 107.703621][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.715960][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.726254][ T8816] device veth1_macvtap entered promiscuous mode [ 107.751336][ T9107] device veth0_vlan entered promiscuous mode [ 107.759063][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.767223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.775236][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.784174][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.792770][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.801586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.809915][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.818337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.826819][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.834823][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.843261][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.851993][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.859975][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.867864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.883181][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.894929][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.904760][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.916610][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.927645][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.938947][ T12] usb 1-1: USB disconnect, device number 2 [ 107.956585][ T9310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.974375][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.984852][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.997305][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.008381][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.030941][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.042533][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.051242][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.059663][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.068010][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.076923][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.086011][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.094552][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.105851][ T9107] device veth1_vlan entered promiscuous mode [ 108.112845][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.125127][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.136266][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.150606][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.162051][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.180190][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.189566][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.203258][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.212351][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.232584][ T9005] device veth0_vlan entered promiscuous mode [ 108.240680][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.254836][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.373386][ T9005] device veth1_vlan entered promiscuous mode [ 108.380406][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.388964][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.397208][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.460577][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 16:44:11 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 108.554794][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.569715][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.591797][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.626665][ T9107] device veth0_macvtap entered promiscuous mode [ 108.639394][ T9107] device veth1_macvtap entered promiscuous mode [ 108.679319][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.684981][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.702930][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.718997][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.732738][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.744152][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.755464][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.768172][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.776050][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.784024][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.793352][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.802376][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.811247][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.820512][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 16:44:11 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x28, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) [ 108.830799][ T9005] device veth0_macvtap entered promiscuous mode [ 108.846489][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.857734][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.868632][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.879603][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.892640][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.906676][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.919440][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.929137][ T9005] device veth1_macvtap entered promiscuous mode [ 108.939279][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.948558][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.958315][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.967218][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.976117][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 16:44:11 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009058103"], 0x0) [ 109.075107][ T12] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.084230][ T12] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.109827][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.122935][ T12] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.134271][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.144215][ T12] usb 1-1: config 1 interface 1 has no altsetting 0 [ 109.147422][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.181763][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.194604][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.210312][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.221464][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.236110][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.249539][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.258058][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.267311][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.277380][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.287704][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.297138][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.306786][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.320926][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.333090][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.343190][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.354597][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.365068][ T9103] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.373016][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.383861][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.393776][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.405481][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.418936][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.434934][ T12] usb 1-1: string descriptor 0 read error: -22 [ 109.441619][ T12] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.465387][ T9310] device veth0_vlan entered promiscuous mode [ 109.472727][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 16:44:12 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x0, 0x5, 0x0, 0x100000000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x0, 0x20001000}, 0xfffffffffffffde3) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x1, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r5 = inotify_init1(0x80800) r6 = dup(r5) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 109.487686][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.488809][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.557277][ T12] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 109.581796][ T9310] device veth1_vlan entered promiscuous mode 16:44:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x200000000000000, 0x2, 0x0}) [ 109.682572][ T12] usb 1-1: USB disconnect, device number 3 [ 109.692613][T10026] binder: 10025:10026 unknown command 0 [ 109.699093][T10026] binder: 10025:10026 ioctl c0306201 20000280 returned -22 [ 109.725097][ T9103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.740940][ T9103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.756777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.767427][ T9103] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 16:44:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x0, 0x5, 0x0, 0x100000000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x0, 0x20001000}, 0xfffffffffffffde3) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x1, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r5 = inotify_init1(0x80800) r6 = dup(r5) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:44:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x101) sendfile(r1, r2, 0x0, 0x1c500) [ 109.768457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.796598][ T9103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.820321][ T9103] usb 3-1: config 0 descriptor?? [ 109.855556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.880867][ T9103] usbhid 3-1:0.0: can't add hid device: -22 [ 109.891830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 16:44:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) [ 109.898974][ T9103] usbhid: probe of 3-1:0.0 failed with error -22 [ 109.920176][ T9310] device veth0_macvtap entered promiscuous mode [ 109.947871][ T9932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.964348][ T9310] device veth1_macvtap entered promiscuous mode [ 109.981077][ T28] audit: type=1804 audit(1594226652.617:2): pid=10053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168024756/syzkaller.tZrxH3/1/file0/file0" dev="loop3" ino=3 res=1 16:44:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 110.059969][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.067495][ T9103] usb 3-1: USB disconnect, device number 2 [ 110.084978][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.122526][T10067] binder: 10066:10067 unknown command 0 [ 110.125009][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.129553][T10067] binder: 10066:10067 ioctl c0306201 20000280 returned -22 [ 110.152712][T10067] binder: BINDER_SET_CONTEXT_MGR already set [ 110.159946][T10067] binder: 10066:10067 ioctl 40046207 0 returned -16 [ 110.164533][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.182784][T10068] binder: BINDER_SET_CONTEXT_MGR already set [ 110.196515][T10068] binder: 10066:10068 ioctl 40046207 0 returned -16 [ 110.207009][T10067] binder: 10066:10067 unknown command 0 [ 110.213439][T10067] binder: 10066:10067 ioctl c0306201 20000280 returned -22 [ 110.235971][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.264973][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.278031][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.291129][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.308270][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.322146][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.334007][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.344083][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.355955][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.369102][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.380697][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.399349][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.413105][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.426130][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.437298][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.448302][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.459688][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.470487][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.482354][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.490319][T10026] binder: 10025:10026 ioctl c0306201 20000100 returned -14 [ 110.495089][T10075] binder: BINDER_SET_CONTEXT_MGR already set [ 110.507614][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.515037][T10075] binder: 10025:10075 ioctl 40046207 0 returned -16 [ 110.516315][T10077] binder: BINDER_SET_CONTEXT_MGR already set [ 110.537171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.546982][T10077] binder: 10025:10077 ioctl 40046207 0 returned -16 [ 110.553855][T10026] binder: 10025:10026 unknown command 0 [ 110.555793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.560492][T10026] binder: 10025:10026 ioctl c0306201 20000280 returned -22 [ 110.579986][T10075] binder: 10025:10075 ioctl c0306201 20000100 returned -14 16:44:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) 16:44:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20087}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000019c0)={@void, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x4305, 0xd72, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "898affffff049ea5c300871bc15c6454d1c3978224ab265930e70b3b98b2006cd42be6c960e8558128ec418761c5b3ff9194b7f1a6a3abf101b0d20dc1654220b77428a5eb939a83676b2104d790b385ce748d65a4950fc7c7defafb3cde81a9e83506327f36a705b9fa095bd44257b8e63c970e35e8351ba0cf4fda6d3babc9052eec5c741976e3daafdcedb6db4aa0"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "84d5df75faa99c9f0f96b0264b0cd3359d94b2c7e994b5a3c50f935bd4a29d30d1e1b57211438b8f124bb3c98da5a6b0559f0b34d08fb2c72296743728ac888fed281e4b7f281ec9c9c059ed39ce00fe7442c6a2876def047a8e992ab3212f9132b855df11d5623d798439d356d7dfbee668383da94886b2fc7469902ee445770a09737b1c30e7bd328603b851d1420dc47113318611f9714aec5b180c4461eba0874612d74f71959a57fcb0d591c9b1f7aedda0fb563779493922cced5f0de263917e1dd10d8945fbc84b793002a2ec6cf2aa62b521"}, {}, {}, {0x8, 0x6558, 0x0, "59ecadfc7f1b363c0fe0d8dd229ef110b865519d5a85b31db112eacfb548bd3ddd7048852f099060e3b11ebee16c9b3429c2fd720b1cb249185dc9ad28359016e2764896878fe68d612e9b150a3b596a741e91c62b90a7bc02d4ddacd012290124da1899df2d72dd17be5fcd9edb08fc1c54fee6fb6822a927841d665478b60d0c987cdfdf7b3df78cc04fae"}}}}}, 0xfca) 16:44:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:13 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 110.844903][ T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.857416][T10093] binder: 10090:10093 unknown command 0 [ 110.865842][T10093] binder: 10090:10093 ioctl c0306201 20000280 returned -22 [ 110.899057][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.907092][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.964938][T10091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.126450][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.206980][T10110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.223219][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.234413][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.246087][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.256826][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.268719][ T49] usb 3-1: config 0 descriptor?? [ 111.320095][ T49] usbhid 3-1:0.0: can't add hid device: -22 [ 111.326679][ T49] usbhid: probe of 3-1:0.0 failed with error -22 16:44:14 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009058103"], 0x0) 16:44:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) 16:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:14 executing program 5: getpid() pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = inotify_init1(0x80800) r3 = dup(r2) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x2000484) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:44:14 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="636f6e7494e8743d726f6f742c6673636f6e7465787496"]) [ 111.524868][ T49] usb 3-1: USB disconnect, device number 3 16:44:14 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:14 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 111.581980][T10134] overlayfs: unrecognized mount option "contӏt=root" or missing value [ 111.592455][T10138] binder: 10130:10138 unknown command 0 [ 111.594024][T10136] overlayfs: unrecognized mount option "contӏt=root" or missing value [ 111.614575][T10138] binder: 10130:10138 ioctl c0306201 20000280 returned -22 16:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:14 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 111.737237][T10157] binder: 10155:10157 unknown command 0 [ 111.743519][T10157] binder: 10155:10157 ioctl c0306201 20000280 returned -22 16:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 111.805491][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.884996][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.984818][ T49] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.344894][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.356215][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.367482][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 112.377471][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.388043][ T49] usb 3-1: config 0 descriptor?? [ 112.431441][ T49] usbhid 3-1:0.0: can't add hid device: -22 [ 112.438003][ T49] usbhid: probe of 3-1:0.0 failed with error -22 [ 112.633013][ T5] usb 3-1: USB disconnect, device number 4 16:44:15 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009058103"], 0x0) 16:44:15 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:15 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) 16:44:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 113.196401][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:44:15 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 113.373273][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.524725][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.540576][T10226] binder: 10222:10226 unknown command 0 [ 113.569848][T10226] binder: 10222:10226 ioctl c0306201 20000280 returned -22 [ 113.894903][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.905869][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.916880][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 113.926546][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.936453][ T5] usb 3-1: config 0 descriptor?? [ 113.977203][ T5] usbhid 3-1:0.0: can't add hid device: -22 [ 113.983323][ T5] usbhid: probe of 3-1:0.0 failed with error -22 [ 114.184327][ T49] usb 3-1: USB disconnect, device number 5 16:44:17 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009058103"], 0x0) 16:44:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:17 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:17 executing program 5: utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:17 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) [ 114.711290][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 16:44:17 executing program 5: utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:17 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 114.760311][T10256] binder: 10250:10256 unknown command 0 [ 114.776171][T10256] binder: 10250:10256 ioctl c0306201 20000280 returned -22 16:44:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:17 executing program 5: utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 114.916713][T10271] binder: 10270:10271 unknown command 0 [ 114.925896][T10271] binder: 10270:10271 ioctl c0306201 20000280 returned -22 [ 115.054647][ T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.454827][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.465806][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.475679][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.484803][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.496167][ T49] usb 3-1: config 0 descriptor?? [ 115.546829][ T49] usbhid 3-1:0.0: can't add hid device: -22 [ 115.552831][ T49] usbhid: probe of 3-1:0.0 failed with error -22 [ 115.751580][ T5] usb 3-1: USB disconnect, device number 6 16:44:18 executing program 2: 16:44:18 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:18 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:18 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) [ 116.302129][T10304] binder: 10299:10304 unknown command 0 [ 116.307881][T10304] binder: 10299:10304 ioctl c0306201 20000280 returned -22 [ 116.316127][T10304] binder_alloc: 10299: binder_alloc_buf, no vma 16:44:19 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:19 executing program 2: 16:44:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:19 executing program 2: 16:44:19 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 2: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 116.479018][T10319] binder: 10314:10319 unknown command 0 [ 116.498972][T10319] binder: 10314:10319 ioctl c0306201 20000280 returned -22 [ 116.521885][T10319] binder_alloc: 10314: binder_alloc_buf, no vma 16:44:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:19 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 116.727781][T10340] binder: 10337:10340 unknown command 0 [ 116.756654][T10340] binder: 10337:10340 ioctl c0306201 20000280 returned -22 [ 116.767493][T10340] binder_alloc: 10337: binder_alloc_buf, no vma 16:44:19 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:44:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 2: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 16:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:19 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:20 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:20 executing program 3: socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:20 executing program 2: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 16:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:20 executing program 3: socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:20 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:20 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:20 executing program 3: socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 118.075800][T10409] binder: 10406:10409 unknown command 0 [ 118.096965][T10409] binder: 10406:10409 ioctl c0306201 20000280 returned -22 16:44:21 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:21 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:21 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:21 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 16:44:21 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 118.861800][T10436] binder: 10430:10436 unknown command 0 [ 118.872298][T10436] binder: 10430:10436 ioctl c0306201 20000280 returned -22 [ 118.882635][T10437] FAT-fs (loop5): bogus number of reserved sectors [ 118.903152][T10437] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:21 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 118.953600][T10448] binder: 10445:10448 unknown command 0 16:44:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:21 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 119.005240][T10448] binder: 10445:10448 ioctl c0306201 20000280 returned -22 [ 119.134500][ T5046] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.146750][T10467] FAT-fs (loop5): bogus number of reserved sectors [ 119.153390][T10467] FAT-fs (loop5): Can't find a valid FAT filesystem [ 119.404473][ T5046] usb 3-1: device descriptor read/64, error 18 16:44:22 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:44:22 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:22 executing program 0: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 119.758542][T10483] FAT-fs (loop5): bogus number of reserved sectors [ 119.789007][T10483] FAT-fs (loop5): Can't find a valid FAT filesystem [ 119.794503][ T5046] usb 3-1: device descriptor read/64, error 18 [ 120.064486][ T5046] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.335842][ T5046] usb 3-1: device descriptor read/64, error 18 [ 120.724466][ T5046] usb 3-1: device descriptor read/64, error 18 [ 120.844486][ T5046] usb usb3-port1: attempt power cycle [ 121.554449][ T5046] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.724685][ T5046] usb 3-1: device descriptor read/8, error -61 16:44:24 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 16:44:24 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:24 executing program 0: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:24 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:44:24 executing program 0: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:24 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 121.896419][T10507] FAT-fs (loop5): bogus number of reserved sectors [ 121.908525][T10507] FAT-fs (loop5): Can't find a valid FAT filesystem [ 121.934417][ T5046] usb 3-1: device descriptor read/8, error -71 16:44:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:24 executing program 0: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 122.015564][T10523] binder: 10520:10523 unknown command 0 [ 122.030136][T10523] binder: 10520:10523 ioctl c0306201 20000280 returned -22 [ 122.074154][T10528] binder: 10527:10528 unknown command 0 [ 122.079898][T10528] binder: 10527:10528 ioctl c0306201 20000280 returned -22 [ 122.086294][T10526] FAT-fs (loop5): bogus number of reserved sectors [ 122.107008][T10526] FAT-fs (loop5): Can't find a valid FAT filesystem [ 122.424418][ T5046] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.594449][ T5046] usb 3-1: device descriptor read/8, error -61 [ 122.864548][ T5046] usb 3-1: device descriptor read/8, error -61 [ 122.984516][ T5046] usb usb3-port1: unable to enumerate USB device 16:44:27 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 16:44:27 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:27 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:44:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:27 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:27 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000), 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 124.930834][T10551] FAT-fs (loop5): bogus number of reserved sectors [ 124.939652][T10554] binder: 10548:10554 unknown command 0 [ 124.945613][T10551] FAT-fs (loop5): Can't find a valid FAT filesystem [ 124.952370][T10554] binder: 10548:10554 ioctl c0306201 20000280 returned -22 16:44:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:27 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 125.061402][T10571] FAT-fs (loop5): bogus number of reserved sectors [ 125.068432][T10571] FAT-fs (loop5): Can't find a valid FAT filesystem [ 125.364388][ T5046] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.664284][ T5046] usb 3-1: device descriptor read/64, error 18 [ 126.074309][ T5046] usb 3-1: device descriptor read/64, error 18 [ 126.354304][ T5046] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.644267][ T5046] usb 3-1: device descriptor read/64, error 18 [ 127.104270][ T5046] usb 3-1: device descriptor read/64, error 18 [ 127.234612][ T5046] usb usb3-port1: attempt power cycle 16:44:30 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 16:44:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:30 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000), 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:30 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:30 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 127.944236][ T5046] usb 3-1: new high-speed USB device number 13 using dummy_hcd 16:44:30 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 127.992695][T10596] FAT-fs (loop5): bogus number of reserved sectors [ 128.007859][T10596] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:30 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000), 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:30 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:30 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 128.207847][T10621] FAT-fs (loop5): bogus number of reserved sectors [ 128.218582][T10621] FAT-fs (loop5): Can't find a valid FAT filesystem [ 128.434245][ T5046] usb 3-1: device not accepting address 13, error -71 [ 128.804222][ T5046] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 129.004304][ T5046] usb 3-1: device descriptor read/8, error -61 [ 129.284402][ T5046] usb 3-1: device descriptor read/8, error -61 [ 129.414274][ T5046] usb usb3-port1: unable to enumerate USB device 16:44:33 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 16:44:33 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:33 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:33 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 131.045041][T10643] FAT-fs (loop5): bogus number of reserved sectors [ 131.051739][T10643] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:33 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 16:44:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 131.142522][T10653] binder: 10651:10653 unknown command 0 [ 131.156124][T10653] binder: 10651:10653 ioctl c0306201 20000280 returned -22 16:44:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 131.190899][T10658] FAT-fs (loop5): bogus number of reserved sectors [ 131.201458][T10658] FAT-fs (loop5): Can't find a valid FAT filesystem [ 131.225034][T10662] binder: 10661:10662 unknown command 0 [ 131.230678][T10662] binder: 10661:10662 ioctl c0306201 20000280 returned -22 [ 131.464146][ T3927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 131.734107][ T3927] usb 3-1: device descriptor read/64, error 18 [ 132.124121][ T3927] usb 3-1: device descriptor read/64, error 18 [ 132.394167][ T3927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 132.664107][ T3927] usb 3-1: device descriptor read/64, error 18 [ 133.054103][ T3927] usb 3-1: device descriptor read/64, error 18 [ 133.174225][ T3927] usb usb3-port1: attempt power cycle [ 133.195189][ T0] NOHZ: local_softirq_pending 08 [ 133.884089][ T3927] usb 3-1: new high-speed USB device number 17 using dummy_hcd 16:44:36 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 16:44:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:36 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 16:44:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:36 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:36 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 134.054068][ T3927] usb 3-1: device descriptor read/8, error -71 [ 134.078242][T10682] FAT-fs (loop5): bogus number of reserved sectors [ 134.093827][T10686] binder: 10676:10686 unknown command 0 16:44:36 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 16:44:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 134.096261][T10682] FAT-fs (loop5): Can't find a valid FAT filesystem [ 134.111476][T10686] binder: 10676:10686 ioctl c0306201 20000280 returned -22 16:44:36 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 134.236576][T10700] binder: 10698:10700 unknown command 0 [ 134.248329][T10700] binder: 10698:10700 ioctl c0306201 20000280 returned -22 [ 134.265853][ T3927] usb 3-1: device descriptor read/8, error -71 16:44:36 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) [ 134.292578][T10704] FAT-fs (loop5): bogus number of reserved sectors [ 134.301210][T10704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 134.348900][T10710] binder: 10709:10710 unknown command 0 [ 134.367975][T10710] binder: 10709:10710 ioctl c0306201 20000280 returned -22 [ 134.754084][ T3927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 134.934085][ T3927] usb 3-1: device descriptor read/8, error -61 [ 135.214122][ T3927] usb 3-1: device descriptor read/8, error -61 [ 135.334105][ T3927] usb usb3-port1: unable to enumerate USB device 16:44:39 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) 16:44:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x2c, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 16:44:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:39 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 137.160990][T10724] FAT-fs (loop5): bogus number of reserved sectors [ 137.171129][T10724] FAT-fs (loop5): Can't find a valid FAT filesystem [ 137.173711][T10728] binder: 10721:10728 unknown command 0 16:44:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:39 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 137.208761][T10728] binder: 10721:10728 ioctl c0306201 20000280 returned -22 16:44:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_ima(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) [ 137.280851][T10742] FAT-fs (loop5): bogus number of reserved sectors [ 137.292350][T10742] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:40 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 137.349836][T10751] binder: 10747:10751 ioctl c0306201 0 returned -14 [ 137.381565][T10752] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.427084][T10755] binder: 10747:10755 unknown command 0 [ 137.443508][T10755] binder: 10747:10755 ioctl c0306201 20000280 returned -22 [ 137.467498][T10757] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.500653][T10752] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.516416][ T3927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 137.528711][T10752] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 137.546935][T10752] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 137.884029][ T3927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.901855][ T3927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.922585][ T3927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 137.933819][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.944979][ T3927] usb 3-1: config 0 descriptor?? [ 138.187765][ T3927] usb 3-1: USB disconnect, device number 19 16:44:41 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) 16:44:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_ima(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) 16:44:41 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:44:41 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 138.742585][T10784] FAT-fs (loop5): bogus number of reserved sectors [ 138.749621][T10789] binder: 10778:10789 ioctl c0306201 0 returned -14 [ 138.766761][T10783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.769706][T10784] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:41 executing program 3: clock_settime(0x0, &(0x7f0000000240)) 16:44:41 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:44:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:41 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 138.798546][T10789] binder: 10778:10789 unknown command 0 [ 138.822169][T10789] binder: 10778:10789 ioctl c0306201 20000280 returned -22 [ 138.943365][T10812] binder: 10809:10812 ioctl c0306201 0 returned -14 [ 138.961983][T10812] binder: 10809:10812 unknown command 0 [ 138.983936][T10812] binder: 10809:10812 ioctl c0306201 20000280 returned -22 [ 139.034077][ T9932] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 139.454079][ T9932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.465886][ T9932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.476191][ T9932] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 139.486023][ T9932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.496011][ T9932] usb 3-1: config 0 descriptor?? [ 139.746029][ T9932] usb 3-1: USB disconnect, device number 20 16:44:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_ima(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) 16:44:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:42 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) 16:44:42 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 140.312594][T10837] FAT-fs (loop5): bogus number of reserved sectors [ 140.319647][T10837] FAT-fs (loop5): Can't find a valid FAT filesystem [ 140.324578][T10839] binder: 10832:10839 ioctl c0306201 200000c0 returned -14 [ 140.327903][T10836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 16:44:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 140.367054][T10843] overlayfs: filesystem on './bus' not supported as upperdir [ 140.392171][T10844] binder: 10832:10844 unknown command 0 [ 140.420940][T10844] binder: 10832:10844 ioctl c0306201 20000280 returned -22 16:44:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_ima(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) 16:44:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 140.545007][T10856] FAT-fs (loop5): invalid media value (0x00) [ 140.566156][T10856] FAT-fs (loop5): Can't find a valid FAT filesystem [ 140.590139][T10863] binder: 10860:10863 ioctl c0306201 200000c0 returned -14 16:44:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 140.647350][T10868] binder: 10860:10868 unknown command 0 [ 140.663321][T10868] binder: 10860:10868 ioctl c0306201 20000280 returned -22 [ 140.674499][ T9932] usb 3-1: new high-speed USB device number 21 using dummy_hcd 16:44:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 140.704462][T10866] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.776516][T10875] FAT-fs (loop5): invalid media value (0x00) [ 140.811818][T10878] binder: 10874:10878 ioctl c0306201 200000c0 returned -14 [ 140.825904][T10875] FAT-fs (loop5): Can't find a valid FAT filesystem [ 140.846504][T10878] binder: 10874:10878 unknown command 0 [ 140.874428][T10878] binder: 10874:10878 ioctl c0306201 20000280 returned -22 [ 141.074050][ T9932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.084336][ T9932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.093313][ T9932] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.103580][ T9932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.114730][ T9932] usb 3-1: config 0 descriptor?? [ 141.354985][ T17] usb 3-1: USB disconnect, device number 21 16:44:44 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009"], 0x0) 16:44:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_ima(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) 16:44:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:44 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 141.912933][T10902] binder: 10898:10902 unknown command 0 [ 141.927094][T10903] FAT-fs (loop5): invalid media value (0x00) [ 141.950434][T10902] binder: 10898:10902 ioctl c0306201 200000c0 returned -22 16:44:44 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:44:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 141.988286][T10903] FAT-fs (loop5): Can't find a valid FAT filesystem [ 142.000523][T10910] binder: 10898:10910 unknown command 0 [ 142.006528][T10910] binder: 10898:10910 ioctl c0306201 20000280 returned -22 [ 142.008608][T10905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 16:44:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x1cd) sendfile(r1, r2, 0x0, 0x1c500) 16:44:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 142.164957][T10925] binder: 10923:10925 unknown command 0 [ 142.179255][T10925] binder: 10923:10925 ioctl c0306201 200000c0 returned -22 [ 142.196663][T10925] binder: 10923:10925 unknown command 0 [ 142.211685][T10925] binder: 10923:10925 ioctl c0306201 20000280 returned -22 [ 142.219522][T10929] FAT-fs (loop5): invalid media value (0x00) [ 142.239182][T10929] FAT-fs (loop5): Can't find a valid FAT filesystem [ 142.246534][ T49] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 142.284333][ T28] audit: type=1804 audit(1594226684.933:3): pid=10933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168024756/syzkaller.tZrxH3/42/file0/file0" dev="loop3" ino=4 res=1 [ 142.623964][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.634114][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.647856][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 142.657193][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.667273][ T49] usb 3-1: config 0 descriptor?? [ 142.708569][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 142.905337][ T5046] usb 3-1: USB disconnect, device number 22 16:44:46 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009"], 0x0) 16:44:46 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:44:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10001, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x400}) lseek(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in=@private}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendfile(r3, r2, 0x0, 0x100000064) 16:44:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 143.467962][T10963] binder: 10957:10963 unknown command 0 [ 143.475566][T10962] FAT-fs (loop5): invalid media value (0x00) [ 143.491307][T10962] FAT-fs (loop5): Can't find a valid FAT filesystem [ 143.500685][T10963] binder: 10957:10963 ioctl c0306201 200000c0 returned -22 16:44:46 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:44:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 143.519539][T10969] binder: 10957:10969 unknown command 0 [ 143.539957][T10969] binder: 10957:10969 ioctl c0306201 20000280 returned -22 16:44:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 16:44:46 executing program 1: r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 143.612646][T10979] binder: 10977:10979 unknown command 0 [ 143.627711][T10979] binder: 10977:10979 ioctl c0306201 200000c0 returned -22 [ 143.646200][T10979] binder: 10977:10979 unknown command 0 [ 143.664098][T10979] binder: 10977:10979 ioctl c0306201 20000280 returned -22 [ 143.688948][T10989] FAT-fs (loop5): invalid media value (0x00) [ 143.717491][T10989] FAT-fs (loop5): Can't find a valid FAT filesystem [ 143.784427][ T5] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 144.175586][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.185852][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.201116][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 144.210639][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.222995][ T5] usb 3-1: config 0 descriptor?? [ 144.282083][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 144.475779][ T17] usb 3-1: USB disconnect, device number 23 16:44:47 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009"], 0x0) 16:44:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 16:44:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) 16:44:47 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:47 executing program 1: r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 145.021685][T11018] binder: 11013:11018 unknown command 0 [ 145.033166][T11018] binder: 11013:11018 ioctl c0306201 200000c0 returned -22 [ 145.047066][T11023] FAT-fs (loop5): bogus number of FAT sectors [ 145.053295][T11023] FAT-fs (loop5): Can't find a valid FAT filesystem [ 145.053898][T11018] binder: 11013:11018 unknown command 0 16:44:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 145.087277][T11018] binder: 11013:11018 ioctl c0306201 20000280 returned -22 16:44:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 145.203788][T11039] FAT-fs (loop5): bogus number of FAT sectors [ 145.216490][T11039] FAT-fs (loop5): Can't find a valid FAT filesystem 16:44:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) [ 145.255756][T11044] binder: 11042:11044 unknown command 0 [ 145.283876][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.285510][T11044] binder: 11042:11044 ioctl c0306201 200000c0 returned -22 16:44:48 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 145.312297][T11049] binder: 11042:11049 unknown command 0 [ 145.324728][ T3927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 145.347711][T11049] binder: 11042:11049 ioctl c0306201 20000280 returned -22 [ 145.397127][T11052] FAT-fs (loop5): bogus number of FAT sectors [ 145.436415][T11052] FAT-fs (loop5): Can't find a valid FAT filesystem [ 145.703929][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 145.712720][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.726056][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.736201][ T49] usb 4-1: config 1 interface 1 has no altsetting 0 [ 145.746036][ T3927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.756400][ T3927] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.771599][ T3927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 145.781179][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.795053][ T3927] usb 3-1: config 0 descriptor?? [ 145.848335][ T3927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 145.913933][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.922990][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.931166][ T49] usb 4-1: Product: syz [ 145.935427][ T49] usb 4-1: Manufacturer: syz [ 145.940240][ T49] usb 4-1: SerialNumber: syz [ 146.046076][ T9932] usb 3-1: USB disconnect, device number 24 [ 146.263976][ T49] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 146.305181][ T49] usb 4-1: 2:130: cannot set enable PITCH [ 146.332376][ T49] usb 4-1: USB disconnect, device number 2 16:44:49 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022"], 0x0) 16:44:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16:44:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(0x0, &(0x7f00000001c0)) [ 146.581372][T11113] binder: 11112:11113 unknown command 25348 [ 146.588816][T11113] binder: 11112:11113 ioctl c0306201 200000c0 returned -22 [ 146.598092][T11113] binder: 11112:11113 unknown command 0 [ 146.608236][T11113] binder: 11112:11113 ioctl c0306201 20000280 returned -22 [ 146.853916][ T49] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 146.963891][ T17] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.254231][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.264468][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.279187][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 147.288808][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.297885][ T49] usb 3-1: config 0 descriptor?? [ 147.338154][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 147.357799][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 147.367248][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.378285][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.388139][ T17] usb 4-1: config 1 interface 1 has no altsetting 0 [ 147.536935][ T49] usb 3-1: USB disconnect, device number 25 [ 147.583895][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.592964][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.601441][ T17] usb 4-1: Product: syz [ 147.605650][ T17] usb 4-1: Manufacturer: syz [ 147.610269][ T17] usb 4-1: SerialNumber: syz 16:44:50 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16:44:50 executing program 1: r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(0x0, &(0x7f00000001c0)) 16:44:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(0x0, &(0x7f00000001c0)) [ 147.931135][T11152] binder: 11147:11152 unknown command 25348 [ 147.943934][ T17] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 147.948441][T11152] binder: 11147:11152 ioctl c0306201 200000c0 returned -22 16:44:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 147.983104][T11161] binder: 11147:11161 unknown command 0 [ 147.993908][ T17] usb 4-1: 2:130: cannot set enable PITCH [ 148.013749][T11161] binder: 11147:11161 ioctl c0306201 20000280 returned -22 16:44:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 16:44:50 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022"], 0x0) [ 148.031199][ T17] usb 4-1: USB disconnect, device number 3 16:44:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 148.136416][T11201] binder: 11196:11201 unknown command 25348 [ 148.142930][T11201] binder: 11196:11201 ioctl c0306201 200000c0 returned -22 [ 148.170787][T11201] binder: 11196:11201 unknown command 0 16:44:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 148.193849][T11201] binder: 11196:11201 ioctl c0306201 20000280 returned -22 [ 148.393867][ T9932] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 148.435363][ T17] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.764107][ T9932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.775585][ T9932] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.788975][ T9932] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 148.799216][ T9932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.807966][ T9932] usb 3-1: config 0 descriptor?? [ 148.846336][ T9932] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 148.875608][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 148.884507][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 148.895712][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.905540][ T17] usb 4-1: config 1 interface 1 has no altsetting 0 [ 149.045511][ T5] usb 3-1: USB disconnect, device number 26 [ 149.075215][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.084278][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.092260][ T17] usb 4-1: Product: syz [ 149.098231][ T17] usb 4-1: Manufacturer: syz [ 149.102807][ T17] usb 4-1: SerialNumber: syz [ 149.433957][ T17] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 149.473851][ T17] usb 4-1: 2:130: cannot set enable PITCH [ 149.499588][ T17] usb 4-1: USB disconnect, device number 4 16:44:52 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 16:44:52 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:52 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022"], 0x0) 16:44:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 149.936074][T11282] binder: 11272:11282 unknown command 287492 [ 149.945987][T11282] binder: 11272:11282 ioctl c0306201 200000c0 returned -22 [ 149.955308][T11282] binder: 11272:11282 unknown command 0 [ 149.961033][T11282] binder: 11272:11282 ioctl c0306201 20000280 returned -22 16:44:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 150.140804][T11301] binder: 11300:11301 unknown command 287492 [ 150.147901][T11301] binder: 11300:11301 ioctl c0306201 200000c0 returned -22 [ 150.158257][T11301] binder: 11300:11301 unknown command 0 [ 150.166334][T11301] binder: 11300:11301 ioctl c0306201 20000280 returned -22 16:44:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 150.203819][ T17] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 150.204526][T11303] binder: 11302:11303 unknown command 287492 [ 150.218524][T11303] binder: 11302:11303 ioctl c0306201 200000c0 returned -22 [ 150.231405][T11303] binder: 11302:11303 unknown command 0 [ 150.241404][T11303] binder: 11302:11303 ioctl c0306201 20000280 returned -22 16:44:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) [ 150.284157][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.613869][ T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.629268][ T17] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.643989][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.652945][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 150.654556][ T17] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.666513][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.683270][ T5] usb 4-1: config 1 interface 1 has no altsetting 0 [ 150.691279][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.710338][ T17] usb 3-1: config 0 descriptor?? [ 150.778038][ T17] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 150.843877][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.843889][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.843899][ T5] usb 4-1: Product: syz [ 150.843913][ T5] usb 4-1: Manufacturer: syz [ 150.843922][ T5] usb 4-1: SerialNumber: syz [ 150.977305][ T49] usb 3-1: USB disconnect, device number 27 [ 151.163868][ T5] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 151.203913][ T5] usb 4-1: 2:130: cannot set enable PITCH [ 151.230966][ T5] usb 4-1: USB disconnect, device number 5 16:44:54 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 16:44:54 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:54 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009"], 0x0) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 151.818668][T11397] binder: 11396:11397 unknown command 0 [ 151.828062][T11397] binder: 11396:11397 ioctl c0306201 20000280 returned -22 [ 151.868118][T11398] binder_alloc: 11396: binder_alloc_buf, no vma [ 151.943812][ T49] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 151.951537][ T17] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.364300][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.373212][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.387582][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.400175][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 152.411250][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.421597][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.431699][ T17] usb 4-1: config 1 interface 1 has no altsetting 0 [ 152.440892][ T49] usb 3-1: config 0 descriptor?? [ 152.507705][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 152.613907][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.623058][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.631626][ T17] usb 4-1: Product: syz [ 152.636190][ T17] usb 4-1: Manufacturer: syz [ 152.640766][ T17] usb 4-1: SerialNumber: syz [ 152.706825][ T9932] usb 3-1: USB disconnect, device number 28 [ 152.973989][ T17] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 153.034155][ T17] usb 4-1: 2:130: cannot set enable PITCH [ 153.075469][ T17] usb 4-1: USB disconnect, device number 6 16:44:56 executing program 3: 16:44:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x12}}]}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 16:44:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 16:44:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:56 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009"], 0x0) 16:44:56 executing program 3: 16:44:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) [ 153.480767][T11466] binder: 11458:11466 unknown command 0 [ 153.488211][T11466] binder: 11458:11466 ioctl c0306201 20000280 returned -22 [ 153.496160][T11466] binder_alloc: 11458: binder_alloc_buf, no vma 16:44:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:56 executing program 3: [ 153.598596][T11478] binder: 11476:11478 unknown command 0 [ 153.606518][T11478] binder: 11476:11478 ioctl c0306201 20000280 returned -22 [ 153.623796][T11478] binder_alloc: 11476: binder_alloc_buf, no vma 16:44:56 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 16:44:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 153.734658][T11485] binder: 11483:11485 unknown command 0 [ 153.748589][T11485] binder: 11483:11485 ioctl c0306201 20000280 returned -22 [ 153.774744][ T49] usb 3-1: new high-speed USB device number 29 using dummy_hcd 16:44:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) [ 153.851624][T11490] binder: 11489:11490 unknown command 0 [ 153.868218][T11490] binder: 11489:11490 ioctl c0306201 20000280 returned -22 [ 154.164175][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.179025][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 154.209854][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:44:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) [ 154.255981][ T49] usb 3-1: config 0 descriptor?? 16:44:56 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 154.297828][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.495402][ T9932] usb 3-1: USB disconnect, device number 29 16:44:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) 16:44:57 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) 16:44:57 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff0022220009"], 0x0) 16:44:57 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:57 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 155.015006][T11521] binder: 11519:11521 unknown command 0 [ 155.020587][T11521] binder: 11519:11521 ioctl c0306201 20000280 returned -22 16:44:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) 16:44:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) 16:44:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) 16:44:57 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 155.353824][ T9932] usb 3-1: new high-speed USB device number 30 using dummy_hcd 16:44:58 executing program 3: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 155.713860][ T9932] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.727058][ T9932] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 155.736630][ T9932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.747278][ T9932] usb 3-1: config 0 descriptor?? [ 155.787653][ T9932] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 155.985870][ T17] usb 3-1: USB disconnect, device number 30 16:44:59 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff00222200090581"], 0x0) 16:44:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) 16:44:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:59 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:44:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 16:44:59 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:44:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) 16:44:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x4}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) [ 156.554617][T11595] binder: 11586:11595 ioctl c0306201 0 returned -14 16:44:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:44:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 16:44:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) [ 156.667940][T11609] binder: 11607:11609 ioctl c0306201 0 returned -14 16:44:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 156.773788][ T9932] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.783005][T11617] binder: BINDER_SET_CONTEXT_MGR already set [ 156.793585][T11617] binder: 11616:11617 ioctl 40046207 0 returned -16 [ 156.811027][T11617] binder: 11616:11617 ioctl c0306201 0 returned -14 [ 156.875442][ T3927] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 157.053754][ T9932] usb 4-1: device descriptor read/64, error 18 [ 157.283811][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.303762][ T3927] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 157.312778][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.323013][ T3927] usb 3-1: config 0 descriptor?? [ 157.396122][ T3927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 157.443819][ T9932] usb 4-1: device descriptor read/64, error 18 [ 157.596441][ T5] usb 3-1: USB disconnect, device number 31 [ 157.713852][ T9932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.983800][ T9932] usb 4-1: device descriptor read/64, error 18 16:45:00 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff00222200090581"], 0x0) 16:45:00 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x4}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 16:45:00 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:00 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 158.159992][T11643] binder: 11634:11643 ioctl c0306201 20000280 returned -14 [ 158.393816][ T9932] usb 4-1: device descriptor read/64, error 18 [ 158.433865][ T49] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 158.513777][ T9932] usb usb4-port1: attempt power cycle [ 158.793982][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.803776][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 158.812795][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.822520][ T49] usb 3-1: config 0 descriptor?? [ 158.867423][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 159.065070][ T5] usb 3-1: USB disconnect, device number 32 [ 159.243757][ T9932] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.334016][ T9932] usb 4-1: Invalid ep0 maxpacket: 0 16:45:02 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:02 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:02 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x4}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 16:45:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 159.483827][ T9932] usb 4-1: new high-speed USB device number 10 using dummy_hcd 16:45:02 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) [ 159.554918][T11676] binder: 11670:11676 ioctl c0306201 20000280 returned -14 16:45:02 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100e4ff00222200090581"], 0x0) 16:45:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x50}}, 0x0) 16:45:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 159.595821][ T9932] usb 4-1: device descriptor read/8, error -71 16:45:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:02 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) [ 159.664611][T11690] binder: 11689:11690 ioctl c0306201 20000280 returned -14 16:45:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x50}}, 0x0) 16:45:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 159.724830][T11694] binder: 11692:11694 unknown command 0 [ 159.733444][T11694] binder: 11692:11694 ioctl c0306201 20000280 returned -22 [ 159.790960][T11702] binder: 11701:11702 unknown command 0 [ 159.798155][T11702] binder: 11701:11702 ioctl c0306201 20000280 returned -22 [ 159.835972][ T9932] usb 4-1: device descriptor read/8, error -71 [ 159.955486][ T9932] usb usb4-port1: unable to enumerate USB device [ 159.963870][ T5046] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 160.303765][ T9932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.333744][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.343593][ T5046] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 160.363629][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.375898][ T5046] usb 3-1: config 0 descriptor?? [ 160.418349][ T5046] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 160.573749][ T9932] usb 4-1: device descriptor read/64, error 18 [ 160.615770][ T3927] usb 3-1: USB disconnect, device number 33 [ 160.963756][ T9932] usb 4-1: device descriptor read/64, error 18 [ 161.233784][ T9932] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 161.514236][ T9932] usb 4-1: device descriptor read/64, error 18 [ 161.923743][ T9932] usb 4-1: device descriptor read/64, error 18 [ 162.043770][ T9932] usb usb4-port1: attempt power cycle 16:45:05 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x50}}, 0x0) 16:45:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x0, 0x0, {0x18}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 16:45:05 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:05 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:05 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:05 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:05 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:05 executing program 2: syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x0, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x0, 0x0, 0x1, "371804"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x0, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x0, 0x0, "b8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0xff, 0x3, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x0, 0x6}]}, 0x2, [{0x100, &(0x7f0000000300)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000600)=""/142) 16:45:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 162.609611][T11735] binder: 11728:11735 unknown command 0 [ 162.630332][T11735] binder: 11728:11735 ioctl c0306201 20000280 returned -22 16:45:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "deb42aef"}, @main]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 16:45:05 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:05 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 162.727978][T11749] binder: 11746:11749 unknown command 0 [ 162.751043][T11749] binder: 11746:11749 ioctl c0306201 20000280 returned -22 [ 162.983717][ T9932] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 163.003698][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.011555][ T3927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 163.084627][ T9932] usb 4-1: Invalid ep0 maxpacket: 0 [ 163.233834][ T9932] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.323909][ T9932] usb 4-1: Invalid ep0 maxpacket: 0 [ 163.329156][ T9932] usb usb4-port1: unable to enumerate USB device [ 163.363733][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.375090][ T3927] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.384108][ T17] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 163.393200][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.401380][ T3927] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.411073][ T3927] usb 3-1: config 1 interface 1 has no altsetting 0 [ 163.419387][ T17] usb 1-1: config 0 descriptor?? [ 163.463811][ T3927] usb 3-1: string descriptor 0 read error: -22 [ 163.470184][ T3927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.482755][ T3927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.753739][ T17] usbhid 1-1:0.0: can't add hid device: -71 [ 163.759795][ T17] usbhid: probe of 1-1:0.0 failed with error -71 [ 163.766234][ T3927] usb 3-1: 2:130: cannot set enable PITCH [ 163.772817][ T17] usb 1-1: USB disconnect, device number 4 [ 163.789813][ T3927] usb 3-1: USB disconnect, device number 34 [ 164.333685][ T3927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.503675][ T17] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 164.723725][ T3927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.734755][ T3927] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 164.744688][ T3927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.757649][ T3927] usb 1-1: config 0 descriptor?? [ 164.893707][ T17] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 164.902863][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.914152][ T17] usb 3-1: config 1 interface 1 has no altsetting 0 [ 164.953754][ T17] usb 3-1: string descriptor 0 read error: -22 [ 164.959980][ T17] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.969650][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.254892][ T3927] wacom 0003:056A:0022.0001: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 165.265167][ T3927] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0022.0001/input/input5 [ 165.278652][ T3927] wacom 0003:056A:0022.0001: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.0-1/input0 [ 165.290662][ T17] usb 3-1: 2:130: cannot set enable PITCH [ 165.320054][ T17] usb 3-1: USB disconnect, device number 35 [ 165.446892][ T9932] usb 1-1: USB disconnect, device number 5 16:45:08 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:08 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:08 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:08 executing program 2: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)=""/187) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x80000001, 0x440) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r3 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfd0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) write$hidraw(r2, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x80000408e201) ioctl$HIDIOCAPPLICATION(r4, 0x40305828, 0x400007) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000f80)=""/194) syz_open_dev$hidraw(0x0, 0xf7fffffd, 0x800004086241) syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) 16:45:08 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:08 executing program 5: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) 16:45:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 165.629792][T11885] binder: 11881:11885 unknown command 0 [ 165.649769][T11885] binder: 11881:11885 ioctl c0306201 20000280 returned -22 16:45:08 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(0x0, 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 165.739246][T11901] binder: 11900:11901 unknown command 0 [ 165.744985][T11901] binder: 11900:11901 ioctl c0306201 20000280 returned -22 [ 165.913725][ T12] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 166.073724][ T17] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 166.223708][ T3927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.303716][ T12] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 166.314180][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 166.433729][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.443096][ T17] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 166.453974][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.503843][ T12] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.513608][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.523068][ T12] usb 3-1: Product: syz [ 166.527434][ T12] usb 3-1: Manufacturer: syz [ 166.532010][ T12] usb 3-1: SerialNumber: syz [ 166.585704][ T12] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.607671][ T3927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.619094][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.628223][ T3927] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 166.638092][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.646757][ T3927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.655264][ T17] usb 4-1: Product: syz [ 166.659604][ T17] usb 4-1: Manufacturer: syz [ 166.665095][ T17] usb 4-1: SerialNumber: syz [ 166.665474][ T3927] usb 1-1: config 0 descriptor?? 16:45:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "deb42aef"}, @main]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 16:45:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, 0x0) 16:45:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 166.779749][T11931] binder: 11930:11931 unknown command 25349 [ 166.787006][T11931] binder: 11930:11931 ioctl c0306201 20000280 returned -22 [ 166.853670][ T3927] usbhid 1-1:0.0: can't add hid device: -71 [ 166.859919][ T3927] usbhid: probe of 1-1:0.0 failed with error -71 [ 166.884408][ T3927] usb 1-1: USB disconnect, device number 6 [ 166.993689][ T17] usb 4-1: 0:2 : does not exist [ 167.001847][ T17] usb 4-1: USB disconnect, device number 15 [ 167.233775][ T3927] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.273860][ T12] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 16:45:10 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:10 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(0x0, 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, 0x0) [ 167.473344][T11965] binder: 11962:11965 unknown command 25349 [ 167.485602][T11965] binder: 11962:11965 ioctl c0306201 20000280 returned -22 [ 167.593872][ T3927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.605634][ T3927] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 167.615683][ T3927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.626548][ T3927] usb 1-1: config 0 descriptor?? [ 167.743712][ T5046] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 167.781363][ T28] audit: type=1800 audit(1594226710.413:4): pid=11888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=5F3E4C76B2518A3CAA0BC5B3 dev="sda1" ino=16215 res=0 16:45:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, 0x0) 16:45:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 167.851422][ T5] usb 3-1: USB disconnect, device number 36 [ 167.877749][T11986] binder: 11984:11986 unknown command 25349 [ 167.884379][T11986] binder: 11984:11986 ioctl c0306201 20000280 returned -22 16:45:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x0, 0xf0f000, {0x3f}}) [ 167.953939][T11993] binder: 11989:11993 unknown command 287493 [ 167.970430][T11993] binder: 11989:11993 ioctl c0306201 20000280 returned -22 [ 168.003649][ T3927] usbhid 1-1:0.0: can't add hid device: -71 [ 168.009761][ T3927] usbhid: probe of 1-1:0.0 failed with error -71 [ 168.034454][ T3927] usb 1-1: USB disconnect, device number 7 [ 168.133950][ T5046] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.143363][ T5046] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 168.154219][ T5046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.313675][ T12] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 168.320797][ T12] ath9k_htc: Failed to initialize the device [ 168.327970][ T5046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.338113][ T5046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.346773][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 168.353298][ T5046] usb 4-1: Product: syz [ 168.358665][ T5046] usb 4-1: Manufacturer: syz [ 168.363254][ T5046] usb 4-1: SerialNumber: syz [ 168.583674][ T3927] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.693687][ T5046] usb 4-1: 0:2 : does not exist [ 168.702965][ T5046] usb 4-1: USB disconnect, device number 16 [ 168.723673][ T5] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 168.943838][ T3927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.954987][ T3927] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 168.964169][ T3927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.973343][ T3927] usb 1-1: config 0 descriptor?? [ 169.113682][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.133439][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.144039][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 169.153158][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.162691][ T5] usb 3-1: config 0 descriptor?? [ 169.454561][ T3927] wacom 0003:056A:0022.0002: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 169.464867][ T3927] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0022.0002/input/input8 [ 169.485656][ T3927] wacom 0003:056A:0022.0002: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.0-1/input0 [ 169.514172][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 169.520376][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.539685][ T5] usb 3-1: USB disconnect, device number 37 [ 169.662500][ T3927] usb 1-1: USB disconnect, device number 8 [ 170.083636][ T9484] usb 3-1: new high-speed USB device number 38 using dummy_hcd 16:45:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x1be, 0x160, 0x0, 0x250, 0x278, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x11}, 0x0, 0x140, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 16:45:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x0, 0xf0f000, {0x3f}}) 16:45:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:12 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(0x0, 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:12 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:12 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x0, 0xf0f000, {0x3f}}) [ 170.214020][T12086] binder: 12082:12086 unknown command 287493 [ 170.226682][T12086] binder: 12082:12086 ioctl c0306201 20000280 returned -22 [ 170.227568][T12090] xt_nfacct: accounting object `syz0' does not exists [ 170.473652][ T17] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.473674][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.492403][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.502763][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 170.512280][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.521074][ T9484] usb 3-1: config 0 descriptor?? [ 170.833649][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.842506][ T17] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 170.852591][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.995476][ T9484] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 171.021127][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.030379][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.039179][ T17] usb 4-1: Product: syz [ 171.043325][ T17] usb 4-1: Manufacturer: syz [ 171.048319][ T17] usb 4-1: SerialNumber: syz [ 171.195564][ T9484] usb 3-1: USB disconnect, device number 38 [ 171.373660][ T17] usb 4-1: 0:2 : does not exist [ 171.382750][ T17] usb 4-1: USB disconnect, device number 17 [ 171.963636][ T9636] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 172.323728][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.334819][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.345138][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 172.354605][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.367163][ T9636] usb 3-1: config 0 descriptor?? 16:45:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:15 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000}) 16:45:15 executing program 3: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000}) 16:45:15 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 172.561685][T12161] binder: 12155:12161 unknown command 287493 [ 172.577326][T12161] binder: 12155:12161 ioctl c0306201 20000280 returned -22 16:45:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:15 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 172.603614][ T9636] usbhid 3-1:0.0: can't add hid device: -71 [ 172.609877][ T9636] usbhid: probe of 3-1:0.0 failed with error -71 16:45:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:15 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 172.654128][ T9636] usb 3-1: USB disconnect, device number 39 [ 172.693428][T12188] binder: 12187:12188 unknown command 0 [ 172.705776][T12188] binder: 12187:12188 ioctl c0306201 20000280 returned -22 [ 172.823624][ T17] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 173.043599][ T9636] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 173.203649][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 173.212463][ T17] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 173.223201][ T17] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.383781][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.393213][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.402557][ T17] usb 4-1: Product: syz [ 173.410776][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.422611][ T17] usb 4-1: Manufacturer: syz [ 173.428157][ T17] usb 4-1: SerialNumber: syz [ 173.433898][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.444835][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 173.454831][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.467410][ T9636] usb 3-1: config 0 descriptor?? [ 173.763662][ T17] usb 4-1: 0:2 : does not exist [ 173.771354][ T17] usb 4-1: USB disconnect, device number 18 [ 173.805100][ T9636] usbhid 3-1:0.0: can't add hid device: -71 [ 173.811077][ T9636] usbhid: probe of 3-1:0.0 failed with error -71 [ 173.823359][ T9636] usb 3-1: USB disconnect, device number 40 [ 174.383657][ T9636] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 174.773598][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.784510][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.795528][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 174.796857][ T0] NOHZ: local_softirq_pending 08 [ 174.805106][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.820607][ T9636] usb 3-1: config 0 descriptor?? [ 175.294626][ T9636] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 175.501225][ T9636] usb 3-1: USB disconnect, device number 41 16:45:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:18 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000}) 16:45:18 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:18 executing program 3: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:18 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 176.056745][T12264] binder: 12259:12264 unknown command 0 [ 176.063099][T12264] binder: 12259:12264 ioctl c0306201 20000280 returned -22 16:45:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:45:18 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 176.116953][T12274] binder: 12273:12274 unknown command 0 [ 176.126000][T12274] binder: 12273:12274 ioctl c0306201 20000280 returned -22 16:45:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 176.180255][T12284] binder: 12283:12284 unknown command 0 [ 176.187325][T12284] binder: 12283:12284 ioctl c0306201 20000280 returned -22 [ 176.198298][T12284] binder: 12283:12284 ioctl c0306201 0 returned -14 [ 176.252561][T12291] binder: 12290:12291 unknown command 0 [ 176.258300][T12291] binder: 12290:12291 ioctl c0306201 20000280 returned -22 [ 176.267074][T12291] binder: 12290:12291 ioctl c0306201 0 returned -14 [ 176.325673][ T12] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 176.365039][ T5] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 176.693580][ T12] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 176.702348][ T12] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 176.712818][ T12] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.723732][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.734744][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.744803][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 176.754166][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.762699][ T5] usb 3-1: config 0 descriptor?? [ 176.873736][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.883179][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.891576][ T12] usb 4-1: Product: syz [ 176.896065][ T12] usb 4-1: Manufacturer: syz [ 176.900721][ T12] usb 4-1: SerialNumber: syz [ 177.103570][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 177.109607][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 177.116842][ T5] usb 3-1: USB disconnect, device number 42 [ 177.223624][ T12] usb 4-1: 0:2 : does not exist [ 177.231401][ T12] usb 4-1: USB disconnect, device number 19 [ 177.673647][ T5] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 178.033894][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.046553][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.056651][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 178.066805][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.077878][ T5] usb 3-1: config 0 descriptor?? [ 178.555330][ T5] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 178.759479][ T5] usb 3-1: USB disconnect, device number 43 16:45:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:45:21 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:21 executing program 3: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:21 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 16:45:22 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 179.330272][T12371] binder: 12362:12371 unknown command 0 [ 179.337883][T12371] binder: 12362:12371 ioctl c0306201 20000280 returned -22 [ 179.354012][T12371] binder: 12362:12371 ioctl c0306201 0 returned -14 16:45:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 179.434107][T12384] binder: 12382:12384 unknown command 0 [ 179.439811][T12384] binder: 12382:12384 ioctl c0306201 20000280 returned -22 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 179.488980][T12389] binder: 12388:12389 unknown command 0 [ 179.494838][T12389] binder: 12388:12389 ioctl c0306201 20000280 returned -22 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x2, 0x0}) [ 179.543575][T12393] binder: 12392:12393 unknown command 0 [ 179.549578][T12393] binder: 12392:12393 ioctl c0306201 20000280 returned -22 [ 179.575473][ T5] usb 4-1: new high-speed USB device number 20 using dummy_hcd 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x2, 0x0}) [ 179.593749][ T9484] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 179.602259][T12396] binder: 12395:12396 unknown command 0 [ 179.608531][T12396] binder: 12395:12396 ioctl c0306201 20000280 returned -22 16:45:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x2, 0x0}) [ 179.642097][T12398] binder: 12397:12398 unknown command 0 [ 179.648132][T12398] binder: 12397:12398 ioctl c0306201 20000280 returned -22 [ 179.688990][T12402] binder: 12401:12402 unknown command 0 [ 179.695173][T12402] binder: 12401:12402 ioctl c0306201 20000280 returned -22 [ 179.963576][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 179.972466][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 179.987360][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.998523][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.007507][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.017823][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 180.027331][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.037887][ T9484] usb 3-1: config 0 descriptor?? [ 180.183630][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.202138][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.210681][ T5] usb 4-1: Product: syz [ 180.215159][ T5] usb 4-1: Manufacturer: syz [ 180.219760][ T5] usb 4-1: SerialNumber: syz [ 180.403611][ T9484] usbhid 3-1:0.0: can't add hid device: -71 [ 180.409939][ T9484] usbhid: probe of 3-1:0.0 failed with error -71 [ 180.420605][ T9484] usb 3-1: USB disconnect, device number 44 [ 180.543555][ T5] usb 4-1: 0:2 : does not exist [ 180.552581][ T5] usb 4-1: USB disconnect, device number 20 [ 180.973521][ T5046] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 181.343578][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.356141][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.366101][ T5046] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 181.375240][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.386194][ T5046] usb 3-1: config 0 descriptor?? [ 181.865023][ T5046] ryos 0003:1E7D:3232.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 182.069729][ T9636] usb 3-1: USB disconnect, device number 45 16:45:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:45:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:25 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:25 executing program 3: syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "88f9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:25 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 182.613970][T12473] binder: 12467:12473 unknown command 0 [ 182.619636][T12473] binder: 12467:12473 ioctl c0306201 20000280 returned -22 16:45:25 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 182.698826][T12487] binder: 12483:12487 unknown command 0 [ 182.706247][T12487] binder: 12483:12487 ioctl c0306201 20000280 returned -22 16:45:25 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) [ 182.768779][T12495] binder: 12492:12495 unknown command 0 [ 182.777361][T12495] binder: 12492:12495 ioctl c0306201 20000280 returned -22 [ 182.845154][T12502] binder: 12500:12502 unknown command 0 [ 182.851646][T12502] binder: 12500:12502 ioctl c0306201 20000280 returned -22 [ 182.861830][T12502] binder_alloc: 12500: binder_alloc_buf size 134217728 failed, no address space [ 182.871471][T12502] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 182.933485][ T9484] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 182.955066][ T3927] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 183.303497][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.312437][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 183.322632][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.335071][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.348016][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.358219][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 183.367299][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.376213][ T3927] usb 3-1: config 0 descriptor?? [ 183.488384][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.497487][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.506477][ T9484] usb 4-1: Product: syz [ 183.510673][ T9484] usb 4-1: Manufacturer: syz [ 183.515966][ T9484] usb 4-1: SerialNumber: syz [ 183.733615][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 183.739647][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 183.747251][ T3927] usb 3-1: USB disconnect, device number 46 [ 183.833628][ T9484] usb 4-1: 0:2 : does not exist [ 183.843244][ T9484] usb 4-1: USB disconnect, device number 21 [ 184.283510][ T3927] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 184.684723][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.695649][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.705680][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 184.714875][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.724211][ T3927] usb 3-1: config 0 descriptor?? [ 185.263630][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 185.269731][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 185.279614][ T3927] usb 3-1: USB disconnect, device number 47 16:45:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:45:28 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:45:28 executing program 3: syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "88f9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) [ 185.719562][T12561] binder: 12557:12561 unknown command 0 [ 185.732054][T12561] binder: 12557:12561 ioctl c0306201 20000280 returned -22 [ 185.755898][T12561] binder_alloc: 12557: binder_alloc_buf size 134217728 failed, no address space 16:45:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:45:28 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 185.779013][T12561] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 16:45:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8000000}], 0x0, 0x2, 0x0}) 16:45:28 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 185.885841][T12584] binder: 12579:12584 unknown command 0 [ 185.895811][T12584] binder: 12579:12584 ioctl c0306201 20000280 returned -22 [ 185.913397][T12584] binder_alloc: 12579: binder_alloc_buf size 134217728 failed, no address space [ 185.928584][T12584] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 186.033444][ T9484] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 186.063787][ T3927] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 186.393699][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 186.402767][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 186.413570][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.453622][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.464813][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.475361][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 186.484869][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.496258][ T3927] usb 3-1: config 0 descriptor?? [ 186.574361][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.584115][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.593605][ T9484] usb 4-1: Product: syz [ 186.597822][ T9484] usb 4-1: Manufacturer: syz [ 186.604088][ T9484] usb 4-1: SerialNumber: syz [ 186.853469][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 186.859442][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 186.869947][ T3927] usb 3-1: USB disconnect, device number 48 [ 186.923522][ T9484] usb 4-1: 0:2 : does not exist [ 186.933312][ T9484] usb 4-1: USB disconnect, device number 22 [ 187.433572][ T3927] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 187.863471][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.874489][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.884799][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 187.894372][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.905060][ T3927] usb 3-1: config 0 descriptor?? [ 188.443451][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 188.449482][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 188.457474][ T3927] usb 3-1: USB disconnect, device number 49 16:45:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16:45:31 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) 16:45:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:31 executing program 3: syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "88f9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:31 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 188.916969][T12651] binder: 12646:12651 unknown command 0 [ 188.931795][T12651] binder: 12646:12651 ioctl c0306201 20000280 returned -22 16:45:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 188.982727][T12665] binder: 12661:12665 unknown command 0 [ 188.992382][T12665] binder: 12661:12665 ioctl c0306201 20000280 returned -22 16:45:31 executing program 4: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{}]}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) [ 189.065397][T12672] binder: 12670:12672 unknown command 0 [ 189.071328][T12672] binder: 12670:12672 ioctl c0306201 20000280 returned -22 16:45:31 executing program 4: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{}]}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 16:45:31 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0xe00) sendfile(r0, r1, 0x0, 0x6) [ 189.193605][ T9636] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 189.203580][ T3927] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 189.205967][ T28] audit: type=1800 audit(1594226731.843:5): pid=12681 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16365 res=0 [ 189.232481][ T28] audit: type=1804 audit(1594226731.863:6): pid=12681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir363874221/syzkaller.pTM8vn/115/file0" dev="sda1" ino=16365 res=1 [ 189.553802][ T9636] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.562972][ T9636] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 189.573266][ T9636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.582348][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.593467][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.603308][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 189.612492][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.621391][ T3927] usb 3-1: config 0 descriptor?? [ 189.765812][ T9636] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.790235][ T9636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.808513][ T9636] usb 4-1: Product: syz [ 189.812922][ T9636] usb 4-1: Manufacturer: syz [ 189.818556][ T9636] usb 4-1: SerialNumber: syz [ 189.963440][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 189.969596][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.976851][ T3927] usb 3-1: USB disconnect, device number 50 [ 190.143443][ T9636] usb 4-1: 0:2 : does not exist [ 190.150760][ T9636] usb 4-1: USB disconnect, device number 23 [ 190.533428][ T5] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 190.893609][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.904825][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.915427][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 190.924867][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.938213][ T5] usb 3-1: config 0 descriptor?? [ 191.503441][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 191.503481][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.505155][ T5] usb 3-1: USB disconnect, device number 51 16:45:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 16:45:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:45:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:34 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:34 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:45:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:45:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 192.243419][ T9484] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 192.253928][ T9636] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 192.614612][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.625918][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.636867][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 192.653421][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:45:35 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r1, 0x0, 0x0) [ 192.663747][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 192.670239][ T9636] usb 3-1: config 0 descriptor?? [ 192.685978][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 192.696279][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 16:45:35 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:35 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r1, 0x0, 0x0) [ 192.707022][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.873765][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.883667][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.892751][ T9484] usb 4-1: Product: syz [ 192.897602][ T9484] usb 4-1: Manufacturer: syz [ 192.902401][ T9484] usb 4-1: SerialNumber: syz [ 193.043402][ T9636] usbhid 3-1:0.0: can't add hid device: -71 [ 193.049466][ T9636] usbhid: probe of 3-1:0.0 failed with error -71 [ 193.060487][ T9636] usb 3-1: USB disconnect, device number 52 [ 193.233419][ T9484] usb 4-1: 0:2 : does not exist [ 193.242078][ T9484] usb 4-1: USB disconnect, device number 24 [ 193.623390][ T5] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 193.994220][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.005266][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.015540][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 194.024817][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.036428][ T5] usb 3-1: config 0 descriptor?? [ 194.573423][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 194.579480][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 194.586917][ T5] usb 3-1: USB disconnect, device number 53 16:45:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:37 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r1, 0x0, 0x0) 16:45:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:37 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:37 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:37 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r1, 0x0, 0x0) 16:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:37 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 16:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:37 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 195.303367][ T9636] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 195.346378][ T3927] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 195.703654][ T9636] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.712474][ T9636] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 195.721814][ T9636] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 195.732296][ T9636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.753854][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.765188][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.776244][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 195.785841][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.797016][ T3927] usb 3-1: config 0 descriptor?? [ 195.913720][ T9636] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.925992][ T9636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.934798][ T9636] usb 4-1: Product: syz [ 195.939075][ T9636] usb 4-1: Manufacturer: syz [ 195.944288][ T9636] usb 4-1: SerialNumber: syz [ 196.153394][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 196.159514][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.167039][ T3927] usb 3-1: USB disconnect, device number 54 [ 196.253412][ T9636] usb 4-1: 0:2 : does not exist [ 196.264689][ T9636] usb 4-1: USB disconnect, device number 25 [ 196.713399][ T5] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 197.073420][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.084485][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.094629][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 197.103843][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.112493][ T5] usb 3-1: config 0 descriptor?? [ 197.653399][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 197.659396][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 197.670018][ T5] usb 3-1: USB disconnect, device number 55 16:45:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 16:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:40 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:40 executing program 3: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) 16:45:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) [ 198.415110][ T5] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 198.423389][ T3927] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 198.773687][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.782419][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 198.792218][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 198.802876][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.813400][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.824629][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.835131][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 198.844837][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.856291][ T3927] usb 3-1: config 0 descriptor?? [ 198.963379][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.972636][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.991179][ T5] usb 4-1: Product: syz [ 198.999894][ T5] usb 4-1: Manufacturer: syz [ 199.004771][ T5] usb 4-1: SerialNumber: syz [ 199.223345][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 199.229656][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 199.241564][ T3927] usb 3-1: USB disconnect, device number 56 [ 199.323347][ T5] usb 4-1: 0:2 : does not exist [ 199.332503][ T5] usb 4-1: USB disconnect, device number 26 [ 199.793304][ T3927] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 200.173350][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.184379][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.195117][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 200.204500][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.217483][ T3927] usb 3-1: config 0 descriptor?? [ 200.763358][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 200.769514][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 200.777312][ T3927] usb 3-1: USB disconnect, device number 57 16:45:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:43 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) 16:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:43 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:43 executing program 3: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:43 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) 16:45:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:44 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 201.493420][ T49] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 201.544490][ T3927] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 201.893580][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 201.902440][ T49] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 201.912946][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.963312][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.974528][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.984629][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 201.994238][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.003114][ T3927] usb 3-1: config 0 descriptor?? [ 202.113556][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.122647][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.131033][ T49] usb 4-1: Product: syz [ 202.135466][ T49] usb 4-1: Manufacturer: syz [ 202.140248][ T49] usb 4-1: SerialNumber: syz [ 202.343308][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 202.349624][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 202.357445][ T3927] usb 3-1: USB disconnect, device number 58 [ 202.463406][ T49] usb 4-1: 0:2 : does not exist [ 202.473079][ T49] usb 4-1: USB disconnect, device number 27 16:45:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:45 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 16:45:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:45 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:45 executing program 3: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:45 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 16:45:45 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 16:45:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:45 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 16:45:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) [ 203.463282][ T5] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 203.543318][ T9484] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 203.833399][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.842116][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 203.854045][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.923443][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.934482][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.944483][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 203.954191][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.963146][ T9484] usb 3-1: config 0 descriptor?? [ 204.013293][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.022539][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.034852][ T5] usb 4-1: Product: syz [ 204.039026][ T5] usb 4-1: Manufacturer: syz [ 204.044484][ T5] usb 4-1: SerialNumber: syz [ 204.313415][ T9484] usbhid 3-1:0.0: can't add hid device: -71 [ 204.319521][ T9484] usbhid: probe of 3-1:0.0 failed with error -71 [ 204.330258][ T9484] usb 3-1: USB disconnect, device number 59 [ 204.363366][ T5] usb 4-1: 0:2 : does not exist [ 204.380324][ T5] usb 4-1: USB disconnect, device number 28 16:45:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:45:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) 16:45:47 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:47 executing program 3: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x50000000000443) 16:45:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$describe(0x6, 0x0, 0x0, 0x0) 16:45:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000201010300000000000000000000000008000840000000400800154000000000"], 0x24}}, 0x0) [ 205.433495][ T9484] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.493258][ T5] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 205.793717][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 205.802418][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.813770][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.853612][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.864974][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.875549][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 205.885262][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.896008][ T5] usb 3-1: config 0 descriptor?? [ 205.983477][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.992664][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.001443][ T9484] usb 4-1: Product: syz [ 206.006089][ T9484] usb 4-1: Manufacturer: syz [ 206.010791][ T9484] usb 4-1: SerialNumber: syz [ 206.233262][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 206.239346][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 206.250281][ T5] usb 3-1: USB disconnect, device number 60 [ 206.333291][ T9484] usb 4-1: 0:2 : does not exist [ 206.342904][ T9484] usb 4-1: USB disconnect, device number 29 16:45:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) 16:45:49 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:45:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 3: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)) 16:45:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 207.231833][ C0] hrtimer: interrupt took 23453 ns [ 207.363271][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 207.383335][ T9484] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 207.723312][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.733579][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.742429][ T5] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 207.753170][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.764963][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.775401][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 207.785118][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.797119][ T9484] usb 3-1: config 0 descriptor?? [ 207.923658][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.933655][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.941780][ T5] usb 4-1: Product: syz [ 207.946771][ T5] usb 4-1: Manufacturer: syz [ 207.951411][ T5] usb 4-1: SerialNumber: syz [ 208.133258][ T9484] usbhid 3-1:0.0: can't add hid device: -71 [ 208.139384][ T9484] usbhid: probe of 3-1:0.0 failed with error -71 [ 208.149623][ T9484] usb 3-1: USB disconnect, device number 61 [ 208.273251][ T5] usb 4-1: 0:2 : does not exist [ 208.282039][ T5] usb 4-1: USB disconnect, device number 30 [ 208.603140][ T9484] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 208.963190][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.974179][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.984610][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 208.993729][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.002488][ T9484] usb 3-1: config 0 descriptor?? [ 209.485807][ T9484] ryos 0003:1E7D:3232.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 209.684241][ T9484] usb 3-1: USB disconnect, device number 62 16:45:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)) 16:45:52 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:45:52 executing program 3: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)) 16:45:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 210.504877][ T49] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 210.542698][ T5046] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 210.893088][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.902639][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.903544][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.916904][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.924219][ T49] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 210.936061][ T5046] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 210.951721][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.963086][ T5046] usb 3-1: config 0 descriptor?? [ 211.115851][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.132407][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.142180][ T49] usb 4-1: Product: syz [ 211.146554][ T49] usb 4-1: Manufacturer: syz [ 211.151328][ T49] usb 4-1: SerialNumber: syz [ 211.203290][T13358] udc-core: couldn't find an available UDC or it's busy [ 211.210665][T13358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.482477][ T49] usb 4-1: 0:2 : does not exist [ 211.492092][ T49] usb 4-1: USB disconnect, device number 31 [ 211.502763][ T5046] usbhid 3-1:0.0: can't add hid device: -71 [ 211.508966][ T5046] usbhid: probe of 3-1:0.0 failed with error -71 [ 211.520699][ T5046] usb 3-1: USB disconnect, device number 63 16:45:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)) 16:45:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:54 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:45:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:54 executing program 3: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)) 16:45:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) 16:45:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 212.232316][ T5046] usb 4-1: new high-speed USB device number 32 using dummy_hcd 16:45:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011}) [ 212.322845][ T49] usb 3-1: new high-speed USB device number 64 using dummy_hcd 16:45:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_create1(0x0) 16:45:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) [ 212.592414][ T5046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.607639][ T5046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.617511][ T5046] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 212.702372][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.713743][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.723918][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 212.733438][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.744459][ T49] usb 3-1: config 0 descriptor?? [ 212.790529][ T5046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.805280][ T5046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.815167][ T5046] usb 4-1: Product: syz [ 212.819380][ T5046] usb 4-1: Manufacturer: syz [ 212.824870][ T5046] usb 4-1: SerialNumber: syz [ 213.007244][T13440] udc-core: couldn't find an available UDC or it's busy [ 213.014298][T13440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 213.142082][ T5046] usb 4-1: 0:2 : does not exist [ 213.150238][ T5046] usb 4-1: USB disconnect, device number 32 [ 213.332070][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 213.338383][ T49] usbhid: probe of 3-1:0.0 failed with error -71 [ 213.346150][ T49] usb 3-1: USB disconnect, device number 64 16:45:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:45:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:56 executing program 3: syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 213.834740][ T0] NOHZ: local_softirq_pending 08 16:45:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 214.081897][ T17] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 214.092450][ T5046] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 214.452191][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.463251][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.474238][ T5046] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 214.481939][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.484187][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.495071][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 214.505495][ T5046] usb 3-1: config 0 descriptor?? [ 214.527583][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.540237][ T17] usb 4-1: config 1 interface 1 has no altsetting 0 [ 214.722148][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.731229][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.740143][ T17] usb 4-1: Product: syz [ 214.744887][ T17] usb 4-1: Manufacturer: syz [ 214.749533][ T17] usb 4-1: SerialNumber: syz [ 214.755666][T13534] udc-core: couldn't find an available UDC or it's busy [ 214.762859][T13534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 215.051646][ T5046] usbhid 3-1:0.0: can't add hid device: -71 [ 215.057594][ T5046] usbhid: probe of 3-1:0.0 failed with error -71 [ 215.065550][ T5046] usb 3-1: USB disconnect, device number 65 [ 215.081648][ T17] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 215.110298][ T17] usb 4-1: USB disconnect, device number 33 16:45:58 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:45:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:58 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:45:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:58 executing program 3: syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:45:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:45:58 executing program 4: socketpair(0x21, 0x6, 0x9, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xa) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) write(r2, &(0x7f0000000100), 0x2c9f9de1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) sendfile(r4, r5, 0x0, 0x20000102000003) [ 215.841455][ T49] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 216.051405][ T5] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 216.211536][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.220402][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.231543][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.241427][ T49] usb 4-1: config 1 interface 1 has no altsetting 0 16:45:58 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:45:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:45:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 216.321352][ T5] usb 3-1: device descriptor read/64, error 18 16:45:59 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r3, &(0x7f0000000340), 0x41395527) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 216.421349][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.441886][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.471445][ T49] usb 4-1: Product: syz [ 216.481049][ T49] usb 4-1: Manufacturer: syz [ 216.493925][ T49] usb 4-1: SerialNumber: syz [ 216.711387][ T5] usb 3-1: device descriptor read/64, error 18 [ 216.842385][ T49] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 216.894408][ T49] usb 4-1: USB disconnect, device number 34 [ 216.981200][ T5] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 217.252761][ T5] usb 3-1: device descriptor read/64, error 18 [ 217.642402][ T5] usb 3-1: device descriptor read/64, error 18 [ 217.761107][ T5] usb usb3-port1: attempt power cycle [ 218.470934][ T5] usb 3-1: new high-speed USB device number 68 using dummy_hcd 16:46:01 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:01 executing program 4: socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xa) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) sendfile(r3, r4, 0x0, 0x20000102000003) 16:46:01 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:46:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:01 executing program 3: syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1, "371804"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 218.610832][ T5] usb 3-1: device descriptor read/8, error -71 [ 218.820835][ T5] usb 3-1: device descriptor read/8, error -71 [ 218.870927][ T17] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 219.270879][ T17] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.280025][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 219.292197][ T17] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.302473][ T17] usb 4-1: config 1 interface 1 has no altsetting 0 [ 219.310818][ T5] usb 3-1: new high-speed USB device number 69 using dummy_hcd 16:46:02 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:46:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) [ 219.492206][ T17] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.507460][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.510698][ T5] usb 3-1: device descriptor read/8, error -61 16:46:02 executing program 4: socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xa) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) sendfile(r3, r4, 0x0, 0x20000102000003) [ 219.552770][ T17] usb 4-1: Product: syz [ 219.559679][ T17] usb 4-1: Manufacturer: syz [ 219.567176][ T17] usb 4-1: SerialNumber: syz [ 219.800598][ T5] usb 3-1: device descriptor read/8, error -61 [ 219.910697][ T17] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 219.923836][ T5] usb usb3-port1: unable to enumerate USB device [ 219.950429][ T17] usb 4-1: USB disconnect, device number 35 16:46:04 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) 16:46:04 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:46:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:04 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 16:46:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) 16:46:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 16:46:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) [ 221.773680][T13761] bridge0: port 1(bridge_slave_0) entered disabled state 16:46:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) [ 221.839777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.861390][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.868698][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 16:46:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000040)='#}\x00\xa7;\x9d#\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 16:46:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) [ 221.950114][ T12] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 222.067531][T13789] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/8' not defined. [ 222.181449][ T3927] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 222.310299][ T12] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 222.323895][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 222.339593][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.349960][ T12] usb 4-1: config 1 interface 1 has no altsetting 0 [ 222.500014][ T3927] usb 3-1: device descriptor read/64, error 18 [ 222.510836][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.519881][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.528756][ T12] usb 4-1: Product: syz [ 222.533297][ T12] usb 4-1: Manufacturer: syz [ 222.538342][ T12] usb 4-1: SerialNumber: syz [ 222.859948][ T12] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 222.885335][ T12] usb 4-1: USB disconnect, device number 36 [ 222.910008][ T3927] usb 3-1: device descriptor read/64, error 18 [ 223.199853][ T3927] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 223.489840][ T3927] usb 3-1: device descriptor read/64, error 18 [ 223.889730][ T3927] usb 3-1: device descriptor read/64, error 18 [ 224.009747][ T3927] usb usb3-port1: attempt power cycle 16:46:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) 16:46:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:46:07 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:46:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = socket$inet6(0xa, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 16:46:07 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) [ 224.735904][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.762958][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.777778][ T49] bridge0: port 1(bridge_slave_0) entered blocking state 16:46:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:46:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x50000000000443) [ 224.785027][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state 16:46:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) 16:46:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) 16:46:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) [ 224.969515][ T5046] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 225.339587][ T5046] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.348433][ T5046] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 225.359528][ T5046] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.369600][ T5046] usb 4-1: config 1 interface 1 has no altsetting 0 [ 225.409424][ T3927] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 225.529724][ T5046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.538895][ T5046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.547199][ T5046] usb 4-1: Product: syz [ 225.551474][ T5046] usb 4-1: Manufacturer: syz [ 225.556377][ T5046] usb 4-1: SerialNumber: syz [ 225.599540][ T3927] usb 3-1: device descriptor read/8, error -61 [ 225.879386][ T5046] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 225.899452][ T3927] usb 3-1: device descriptor read/8, error -61 [ 225.916006][ T5046] usb 4-1: USB disconnect, device number 37 [ 226.189326][ T3927] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 226.379237][ T3927] usb 3-1: device descriptor read/8, error -61 [ 226.649904][ T3927] usb 3-1: device descriptor read/8, error -61 [ 226.769271][ T3927] usb usb3-port1: unable to enumerate USB device 16:46:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) 16:46:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:46:10 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 16:46:10 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:46:10 executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x50000000000443) 16:46:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r3, 0x0, 0x70bd2c, 0xd1df, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="6820000038391369f8927632d0b3481ab60cc7fbc21b4cc264a66bf3760b08a3dff6fdfea89fb56b870a1c05edb88123c1de92c9a0fb00716be4e9fdaf5d5168900c3c5d97f7feb352359a94ce8eaf", @ANYRES16, @ANYBLOB="04f92abd7000fedbdf250600000005000100000000001500010000001400020000000000000000000000ffd5ca34ffffffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) exit_group(0x0) close(0xffffffffffffffff) pipe2$9p(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) 16:46:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) 16:46:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000002940)="0200ffff0000", 0x6}]) 16:46:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) [ 227.902352][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 227.915640][T13927] SQUASHFS error: Failed to read block 0x0: -5 [ 227.924201][T13927] unable to read squashfs_super_block [ 227.951029][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 227.962181][T13927] SQUASHFS error: Failed to read block 0x0: -5 [ 227.968385][T13927] unable to read squashfs_super_block [ 228.023999][ T12] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 228.238857][ T5046] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 228.399076][ T12] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.408175][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.420076][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.430537][ T12] usb 4-1: config 1 interface 1 has no altsetting 0 [ 228.508838][ T5046] usb 3-1: device descriptor read/64, error 18 [ 228.588905][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.588925][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.588988][ T12] usb 4-1: Product: syz [ 228.589001][ T12] usb 4-1: Manufacturer: syz [ 228.615140][ T12] usb 4-1: SerialNumber: syz [ 228.898784][ T5046] usb 3-1: device descriptor read/64, error 18 [ 228.938809][ T12] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 228.969205][ T12] usb 4-1: USB disconnect, device number 38 [ 229.168701][ T5046] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 229.438642][ T5046] usb 3-1: device descriptor read/64, error 18 [ 229.829015][ T5046] usb 3-1: device descriptor read/64, error 18 [ 229.948621][ T5046] usb usb3-port1: attempt power cycle [ 230.678415][ T5046] usb 3-1: new high-speed USB device number 76 using dummy_hcd 16:46:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x0) 16:46:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)) 16:46:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:13 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:46:13 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 230.787506][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 230.799000][T13983] SQUASHFS error: Failed to read block 0x0: -5 [ 230.805176][T13983] unable to read squashfs_super_block [ 230.818397][ T5046] usb 3-1: device descriptor read/8, error -71 16:46:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x1, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 16:46:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 230.896218][T13997] ./file0: Can't open blockdev [ 230.902323][ T3222] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 230.914125][T13993] SQUASHFS error: Failed to read block 0x0: -5 [ 230.924819][T13993] unable to read squashfs_super_block 16:46:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 230.967050][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 230.982691][T14006] SQUASHFS error: Failed to read block 0x0: -5 [ 231.003636][T14006] unable to read squashfs_super_block [ 231.038408][ T5046] usb 3-1: device descriptor read/8, error -71 [ 231.048474][ T3927] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 231.053068][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 231.067203][T14013] SQUASHFS error: Failed to read block 0x0: -5 [ 231.102650][T14013] unable to read squashfs_super_block [ 231.429462][ T3927] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 231.438804][ T3927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 231.449951][ T3927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.460205][ T3927] usb 4-1: config 1 interface 1 has no altsetting 0 [ 231.548255][ T5046] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 231.618548][ T3927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.627712][ T3927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.636130][ T3927] usb 4-1: Product: syz [ 231.640461][ T3927] usb 4-1: Manufacturer: syz [ 231.645303][ T3927] usb 4-1: SerialNumber: syz [ 231.728395][ T5046] usb 3-1: device descriptor read/8, error -61 [ 231.968213][ T3927] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 231.977135][ T3927] usb 4-1: 2:1 : invalid channels 0 [ 232.013554][ T3927] usb 4-1: USB disconnect, device number 39 [ 232.038316][ T5046] usb 3-1: device descriptor read/8, error -61 [ 232.158170][ T5046] usb usb3-port1: unable to enumerate USB device 16:46:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:16 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)) 16:46:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x1, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 16:46:16 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:46:16 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 16:46:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 233.834631][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 233.848329][T14059] SQUASHFS error: Failed to read block 0x0: -5 [ 233.870922][T14059] unable to read squashfs_super_block [ 233.920706][T14071] bridge0: port 1(bridge_slave_0) entered disabled state 16:46:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 233.969455][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 233.980754][T14077] SQUASHFS error: Failed to read block 0x0: -5 [ 233.992566][T14077] unable to read squashfs_super_block 16:46:16 executing program 4: 16:46:16 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x180743, 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 16:46:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 234.074488][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 234.087319][T14086] SQUASHFS error: Failed to read block 0x0: -5 [ 234.097770][ T3927] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 234.113407][T14086] unable to read squashfs_super_block [ 234.172840][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 234.184462][T14093] SQUASHFS error: Failed to read block 0x0: -5 [ 234.193861][T14093] unable to read squashfs_super_block [ 234.257750][ T49] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 234.467760][ T3927] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.476572][ T3927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 234.488166][ T3927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.498215][ T3927] usb 4-1: config 1 interface 1 has no altsetting 0 [ 234.527695][ T49] usb 3-1: device descriptor read/64, error 18 [ 234.657987][ T3927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.667251][ T3927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.675842][ T3927] usb 4-1: Product: syz [ 234.680323][ T3927] usb 4-1: Manufacturer: syz [ 234.685113][ T3927] usb 4-1: SerialNumber: syz [ 234.917648][ T49] usb 3-1: device descriptor read/64, error 18 [ 235.007734][ T3927] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 235.015307][ T3927] usb 4-1: 2:1 : invalid channels 0 [ 235.049151][ T3927] usb 4-1: USB disconnect, device number 40 [ 235.187894][ T49] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 235.457533][ T49] usb 3-1: device descriptor read/64, error 18 [ 235.847491][ T49] usb 3-1: device descriptor read/64, error 18 [ 235.967470][ T49] usb usb3-port1: attempt power cycle [ 236.677378][ T49] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 236.767671][ T49] usb 3-1: Invalid ep0 maxpacket: 0 16:46:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:19 executing program 4: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file2\x00') setxattr$security_ima(&(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0) 16:46:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) 16:46:19 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 16:46:19 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 236.875177][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 236.886458][T14136] SQUASHFS error: Failed to read block 0x0: -5 [ 236.896943][T14136] unable to read squashfs_super_block 16:46:19 executing program 4: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file2\x00') setxattr$security_ima(&(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0) 16:46:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 236.970163][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 236.982844][T14151] SQUASHFS error: Failed to read block 0x0: -5 [ 236.992623][T14151] unable to read squashfs_super_block 16:46:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 16:46:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 16:46:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 237.072502][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 237.092870][T14160] SQUASHFS error: Failed to read block 0x0: -5 [ 237.102194][T14160] unable to read squashfs_super_block [ 237.127963][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 237.139227][T14169] SQUASHFS error: Failed to read block 0x0: -5 [ 237.145940][T14169] unable to read squashfs_super_block [ 237.152310][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 237.167231][ T12] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 237.217257][ T49] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 237.307439][ T49] usb 3-1: Invalid ep0 maxpacket: 0 [ 237.313293][ T49] usb usb3-port1: unable to enumerate USB device [ 237.547481][ T12] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 237.556589][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 237.568864][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.580055][ T12] usb 4-1: config 1 interface 1 has no altsetting 0 [ 237.767258][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.778182][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.786588][ T12] usb 4-1: Product: syz [ 237.791813][ T12] usb 4-1: Manufacturer: syz [ 237.796513][ T12] usb 4-1: SerialNumber: syz [ 238.157938][ T12] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 238.165423][ T12] usb 4-1: 2:1 : invalid channels 0 [ 238.197089][ T12] usb 4-1: USB disconnect, device number 41 16:46:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:22 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 16:46:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 16:46:22 executing program 4: 16:46:22 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x0, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:22 executing program 4: [ 239.888022][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:46:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:22 executing program 4: 16:46:22 executing program 4: 16:46:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:22 executing program 4: [ 240.156796][ T49] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 240.326740][ T12] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 240.546797][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.555797][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 240.567093][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.578570][ T49] usb 4-1: config 1 interface 1 has no altsetting 0 [ 240.596695][ T12] usb 3-1: device descriptor read/64, error 18 [ 240.766947][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.776058][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.784128][ T49] usb 4-1: Product: syz [ 240.788896][ T49] usb 4-1: Manufacturer: syz [ 240.793571][ T49] usb 4-1: SerialNumber: syz [ 240.986609][ T12] usb 3-1: device descriptor read/64, error 18 [ 241.136634][ T49] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 241.144397][ T49] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 241.184608][ T49] usb 4-1: USB disconnect, device number 42 [ 241.256598][ T12] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 241.526532][ T12] usb 3-1: device descriptor read/64, error 18 [ 241.916467][ T12] usb 3-1: device descriptor read/64, error 18 [ 242.036530][ T12] usb usb3-port1: attempt power cycle [ 242.756342][ T12] usb 3-1: new high-speed USB device number 84 using dummy_hcd 16:46:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:25 executing program 4: 16:46:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:25 executing program 1: clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = eventfd2(0x75, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1142, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x10}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 16:46:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 16:46:25 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x0, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 242.866390][ T12] usb 3-1: Invalid ep0 maxpacket: 0 16:46:25 executing program 4: [ 242.940027][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 242.952361][T14288] SQUASHFS error: Failed to read block 0x0: -5 [ 242.958111][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.962353][T14288] unable to read squashfs_super_block 16:46:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:25 executing program 4: 16:46:25 executing program 4: [ 243.076477][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 243.088196][T14302] SQUASHFS error: Failed to read block 0x0: -5 [ 243.094890][T14302] unable to read squashfs_super_block 16:46:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:25 executing program 4: [ 243.177488][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 243.191074][T14307] SQUASHFS error: Failed to read block 0x0: -5 [ 243.197327][T14307] unable to read squashfs_super_block [ 243.216328][ T9484] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 243.346309][ T12] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 243.596573][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.609705][ T12] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 243.620083][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 243.628834][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.637890][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 243.651372][ T12] usb 3-1: config 0 descriptor?? [ 243.658752][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.668987][ T9484] usb 4-1: config 1 interface 1 has no altsetting 0 [ 243.708410][ T12] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 243.856236][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.865637][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.874009][ T9484] usb 4-1: Product: syz [ 243.878416][ T9484] usb 4-1: Manufacturer: syz [ 243.883138][ T9484] usb 4-1: SerialNumber: syz [ 243.910345][ T3927] usb 3-1: USB disconnect, device number 85 [ 244.216155][ T9484] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 244.223772][ T9484] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 244.266414][ T9484] usb 4-1: USB disconnect, device number 43 [ 244.466173][ T3927] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 244.826338][ T3927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.839290][ T3927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 244.848546][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.858231][ T3927] usb 3-1: config 0 descriptor?? [ 244.900115][ T3927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 16:46:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:28 executing program 4: 16:46:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:28 executing program 1: 16:46:28 executing program 5: 16:46:28 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x0, 0x0, 0x1, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 246.105324][ T49] usb 3-1: USB disconnect, device number 86 16:46:28 executing program 4: 16:46:28 executing program 1: 16:46:28 executing program 5: 16:46:28 executing program 4: 16:46:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:28 executing program 1: [ 246.445806][ T12] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 246.585732][ T49] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 246.855705][ T12] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 246.864449][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 246.875351][ T12] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.885111][ T12] usb 4-1: config 1 interface 1 has no altsetting 0 [ 246.945730][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.958685][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 246.968258][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.978910][ T49] usb 3-1: config 0 descriptor?? [ 247.018213][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 247.055695][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.064959][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.073779][ T12] usb 4-1: Product: syz [ 247.078387][ T12] usb 4-1: Manufacturer: syz [ 247.082960][ T12] usb 4-1: SerialNumber: syz [ 247.217142][ T9484] usb 3-1: USB disconnect, device number 87 [ 247.425629][ T12] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 247.433028][ T12] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 247.481760][ T12] usb 4-1: USB disconnect, device number 44 [ 247.825535][ T9484] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 248.235753][ T9484] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.249437][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 248.259415][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.269861][ T9484] usb 3-1: config 0 descriptor?? [ 248.319306][ T9484] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 16:46:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:32 executing program 4: 16:46:32 executing program 5: 16:46:32 executing program 1: 16:46:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:32 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x0, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 249.526334][ T49] usb 3-1: USB disconnect, device number 88 16:46:32 executing program 1: 16:46:32 executing program 4: 16:46:32 executing program 5: 16:46:32 executing program 1: 16:46:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:32 executing program 4: [ 249.713159][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 249.748554][T14467] SQUASHFS error: Failed to read block 0x0: -5 [ 249.762492][T14467] unable to read squashfs_super_block [ 249.875267][ T9484] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 250.005291][ T49] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 250.235213][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.244061][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 250.255812][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.266197][ T9484] usb 4-1: config 1 interface 1 has no altsetting 0 [ 250.375181][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 250.388246][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 250.397540][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.406912][ T49] usb 3-1: config 0 descriptor?? [ 250.425405][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.437305][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.446129][ T9484] usb 4-1: Product: syz [ 250.450539][ T9484] usb 4-1: Manufacturer: syz [ 250.457042][ T9484] usb 4-1: SerialNumber: syz [ 250.457673][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 250.671263][ T49] usb 3-1: USB disconnect, device number 89 [ 250.785269][ T9484] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 250.792902][ T9484] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 250.827711][ T9484] usb 4-1: USB disconnect, device number 45 [ 251.265086][ T49] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 251.625228][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 251.638473][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 251.648709][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.658005][ T49] usb 3-1: config 0 descriptor?? [ 251.709130][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 16:46:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:35 executing program 5: 16:46:35 executing program 4: 16:46:35 executing program 1: 16:46:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:35 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x0, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 252.915329][ T49] usb 3-1: USB disconnect, device number 90 16:46:35 executing program 1: 16:46:35 executing program 4: 16:46:35 executing program 5: [ 252.998112][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 253.010072][T14538] SQUASHFS error: Failed to read block 0x0: -5 16:46:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:35 executing program 4: [ 253.044770][T14538] unable to read squashfs_super_block 16:46:35 executing program 1: [ 253.087071][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 253.098576][T14548] SQUASHFS error: Failed to read block 0x0: -5 [ 253.107132][T14548] unable to read squashfs_super_block [ 253.264848][T14078] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 253.364904][ T49] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 253.624981][T14078] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 253.634012][T14078] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 253.645175][T14078] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.655193][T14078] usb 4-1: config 1 interface 1 has no altsetting 0 [ 253.724737][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.736266][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.746350][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 253.756023][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.767133][ T49] usb 3-1: config 0 descriptor?? [ 253.814898][T14078] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.824278][T14078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.832692][T14078] usb 4-1: Product: syz [ 253.837160][T14078] usb 4-1: Manufacturer: syz [ 253.841774][T14078] usb 4-1: SerialNumber: syz [ 254.104748][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 254.110922][ T49] usbhid: probe of 3-1:0.0 failed with error -71 [ 254.118768][ T49] usb 3-1: USB disconnect, device number 91 [ 254.164764][T14078] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 254.172169][T14078] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 254.216124][T14078] usb 4-1: USB disconnect, device number 46 [ 254.574560][ T49] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 254.964640][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.976840][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.987135][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 254.997726][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.007819][ T49] usb 3-1: config 0 descriptor?? [ 255.476792][ T49] ryos 0003:1E7D:3232.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 255.677108][ T12] usb 3-1: USB disconnect, device number 92 16:46:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:38 executing program 5: 16:46:38 executing program 4: 16:46:38 executing program 1: 16:46:38 executing program 3: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x0, "371804"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:38 executing program 4: 16:46:38 executing program 1: 16:46:38 executing program 5: [ 256.243420][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 256.256587][T14628] SQUASHFS error: Failed to read block 0x0: -5 16:46:38 executing program 1: 16:46:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 256.292239][T14628] unable to read squashfs_super_block 16:46:39 executing program 5: [ 256.371836][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 256.383136][T14643] SQUASHFS error: Failed to read block 0x0: -5 [ 256.400796][T14643] unable to read squashfs_super_block [ 256.514297][ T49] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 256.524418][ T9636] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 256.874308][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 256.883118][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 256.894130][ T49] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.904733][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.915720][ T49] usb 4-1: config 1 interface 1 has no altsetting 0 [ 256.922367][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.932217][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 256.941343][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.951914][ T9636] usb 3-1: config 0 descriptor?? [ 257.074303][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.084550][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.092548][ T49] usb 4-1: Product: syz [ 257.097509][ T49] usb 4-1: Manufacturer: syz [ 257.102109][ T49] usb 4-1: SerialNumber: syz [ 257.294214][ T9636] usbhid 3-1:0.0: can't add hid device: -71 [ 257.300207][ T9636] usbhid: probe of 3-1:0.0 failed with error -71 [ 257.310477][ T9636] usb 3-1: USB disconnect, device number 93 [ 257.424218][ T49] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 257.431892][ T49] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 257.460012][ T49] usb 4-1: USB disconnect, device number 47 [ 257.764146][ T9636] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 258.164223][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.175290][ T9636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.185198][ T9636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 258.194424][ T9636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.204813][ T9636] usb 3-1: config 0 descriptor?? [ 258.674947][ T9636] ryos 0003:1E7D:3232.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 258.877085][ T9636] usb 3-1: USB disconnect, device number 94 16:46:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:42 executing program 4: 16:46:42 executing program 1: 16:46:42 executing program 5: 16:46:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:42 executing program 3: syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 16:46:42 executing program 4: 16:46:42 executing program 5: [ 259.414825][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 259.426171][T14722] SQUASHFS error: Failed to read block 0x0: -5 [ 259.450681][T14722] unable to read squashfs_super_block 16:46:42 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:42 executing program 1: 16:46:42 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x0, @pix_mp={0x2, 0x2, 0x56555959, 0x0, 0xc, [{0x5, 0x20}, {0x9, 0x2}, {0xa02, 0x6}, {0x581, 0x17}, {0x2, 0xfffffffc}, {0x9, 0x8}, {0x2, 0x40}, {0x7, 0x100}], 0xfe, 0x81, 0x7, 0x2, 0x7}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa80, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000340)={0x9, 0x5, {0x0, 0x5, 0x0, {0x9, 0x1}, {0x0, 0x800}, @ramp={0x6, 0x5, {0x1, 0x1, 0x0, 0x4}}}, {0x5, 0x1, 0x0, {0xb52, 0x6f}, {0x3, 0x3}, @period={0x5b, 0xfff7, 0x62a7, 0x8, 0x7, {0x2, 0x0, 0x8, 0x6}, 0x0, &(0x7f00000000c0)}}}) creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000070100000001000000e5981ca19487a9cf740fdc58f696ba62a1076b7d07b133b35994f2e99586347e8108ac0b87bfc17f6c27848a9d0ef331188c947affdd195c1524033d9fc7"], 0xd) 16:46:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)}, 0x0) syz_mount_image$xfs(&(0x7f0000000800)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x18ad809, 0x0) [ 259.592372][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 259.603619][T14736] SQUASHFS error: Failed to read block 0x0: -5 [ 259.620897][T14736] unable to read squashfs_super_block [ 259.713898][ T9484] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 259.775065][ T12] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 260.073828][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 260.083246][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.094990][ T9484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.105029][ T9484] usb 4-1: config 1 interface 1 has no altsetting 0 [ 260.153837][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.165189][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.175311][ T12] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 260.184590][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.193029][ T12] usb 3-1: config 0 descriptor?? [ 260.263893][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.273058][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.281159][ T9484] usb 4-1: Product: syz [ 260.285497][ T9484] usb 4-1: Manufacturer: syz [ 260.290063][ T9484] usb 4-1: SerialNumber: syz [ 260.533805][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 260.541396][ T12] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.549483][ T12] usb 3-1: USB disconnect, device number 95 [ 260.613793][ T9484] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 260.621753][ T9484] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 260.648799][ T9484] usb 4-1: USB disconnect, device number 48 [ 261.003746][ T12] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 261.363955][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.375286][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.386110][ T12] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 261.396019][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.406658][ T12] usb 3-1: config 0 descriptor?? [ 261.874355][ T12] ryos 0003:1E7D:3232.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 262.074975][ T9636] usb 3-1: USB disconnect, device number 96 16:46:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) dup2(r1, r0) 16:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000225bd7000fedbdf250100000008000400e0000001"], 0x1c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) accept(r1, &(0x7f00000002c0)=@ipx, 0x0) 16:46:45 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 16:46:45 executing program 3: syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 262.608575][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 262.621714][T14821] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 262.646223][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 16:46:45 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 262.657499][T14827] SQUASHFS error: Failed to read block 0x0: -5 [ 262.669360][T14827] unable to read squashfs_super_block 16:46:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80363}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) syz_mount_image$xfs(&(0x7f0000000800)='xfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x18ad809, 0x0) 16:46:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 262.719637][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 262.730952][T14844] SQUASHFS error: Failed to read block 0x0: -5 [ 262.744627][T14844] unable to read squashfs_super_block 16:46:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:45 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x0, @pix_mp={0x2, 0x2, 0x56555959, 0x0, 0xc, [{0x5, 0x20}, {0x9, 0x2}, {0xa02, 0x6}, {0x581, 0x17}, {0x2, 0xfffffffc}, {0x9, 0x8}, {0x2, 0x40}, {0x7, 0x100}], 0xfe, 0x81, 0x7, 0x2, 0x7}}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa80, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000340)={0x9, 0x5, {0x0, 0x5, 0x0, {0x9, 0x1}, {0x0, 0x800}, @ramp={0x6, 0x5, {0x1, 0x1, 0x0, 0x4}}}, {0x5, 0x1, 0x0, {0xb52, 0x6f}, {0x3, 0x3}, @period={0x5b, 0xfff7, 0x62a7, 0x8, 0x7, {0x0, 0x0, 0x8, 0x6}, 0x0, &(0x7f00000000c0)}}}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) [ 262.781514][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 262.792812][T14848] SQUASHFS error: Failed to read block 0x0: -5 [ 262.801444][T14848] unable to read squashfs_super_block [ 262.807338][T14851] rdma_op 00000000d1a0b71c conn xmit_rdma 0000000000000000 [ 262.860371][T14860] ./file0: Can't open blockdev [ 262.914005][ T9636] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 262.983463][T14078] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 263.293471][ T9636] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.302446][ T9636] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 263.313405][ T9636] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.323516][ T9636] usb 4-1: config 1 interface 1 has no altsetting 0 [ 263.373514][T14078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.384422][T14078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.394421][T14078] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 263.403671][T14078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.412675][T14078] usb 3-1: config 0 descriptor?? [ 263.458924][T14078] usbhid 3-1:0.0: can't add hid device: -22 [ 263.465026][T14078] usbhid: probe of 3-1:0.0 failed with error -22 [ 263.523510][ T9636] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.532974][ T9636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.542082][ T9636] usb 4-1: Product: syz [ 263.546726][ T9636] usb 4-1: Manufacturer: syz [ 263.551457][ T9636] usb 4-1: SerialNumber: syz [ 263.655406][ T9484] usb 3-1: USB disconnect, device number 97 [ 263.893405][ T9636] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 263.902800][ T9636] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 263.946466][ T9636] usb 4-1: USB disconnect, device number 49 [ 264.213379][ T9484] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 264.573331][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.584449][ T9484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.594840][ T9484] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 264.604194][ T9484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.617280][ T9484] usb 3-1: config 0 descriptor?? [ 264.657519][ T9484] usbhid 3-1:0.0: can't add hid device: -22 [ 264.663796][ T9484] usbhid: probe of 3-1:0.0 failed with error -22 16:46:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "b2bab1d6"}]}}, 0x0}, 0x0) 16:46:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 16:46:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) 16:46:48 executing program 1: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2, 0x4c}, &(0x7f0000000040)='R\x10rist\x18m\x84\x89\xa5\x05\x04Vi0\x97ddR\xd1\x06\xd3r\x90J%P\x0f\x82[\n~P\xd7\x12\x805', 0xfffffffffffffffb) 16:46:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) 16:46:48 executing program 3: syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @mixer_unit={0x5}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "88f99bf1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x1}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 265.863139][T14078] usb 3-1: USB disconnect, device number 98 16:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) lseek(r0, 0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 265.911820][T14931] overlayfs: overlapping lowerdir path [ 265.929811][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 265.942128][T14935] SQUASHFS error: Failed to read block 0x0: -5 16:46:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks'}}]}) 16:46:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 265.960853][T14935] unable to read squashfs_super_block 16:46:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000240)={[{@noquota='noquota'}]}) 16:46:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init() memfd_create(0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbe1862e81c5e2"], 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xa198) [ 266.026571][ T3223] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 266.038815][T14954] SQUASHFS error: Failed to read block 0x0: -5 [ 266.054847][T14954] unable to read squashfs_super_block 16:46:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 266.183060][ T9636] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 266.198277][ T3222] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 266.209784][T14971] SQUASHFS error: Failed to read block 0x0: -5 [ 266.218212][T14971] unable to read squashfs_super_block [ 266.271438][T14979] ================================================================== [ 266.279553][T14979] BUG: KCSAN: data-race in dentry_lru_isolate_shrink / dput [ 266.286842][T14979] [ 266.289204][T14979] write to 0xffff888050508480 of 4 bytes by task 14966 on cpu 0: [ 266.296943][T14979] dentry_lru_isolate_shrink+0x7b/0x100 [ 266.302480][T14979] __list_lru_walk_one+0xfb/0x320 [ 266.307491][T14979] list_lru_walk_node+0x63/0x1a0 [ 266.312420][T14979] shrink_dcache_sb+0x97/0x1c0 [ 266.317176][T14979] reconfigure_super+0x267/0x4d0 [ 266.322095][T14979] do_mount+0x1354/0x1bd0 [ 266.326408][T14979] __se_sys_mount+0xd3/0x100 [ 266.330983][T14979] __x64_sys_mount+0x63/0x70 [ 266.335571][T14979] do_syscall_64+0x51/0xb0 [ 266.339979][T14979] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.345847][T14979] [ 266.348161][T14979] read to 0xffff888050508480 of 4 bytes by task 14979 on cpu 1: [ 266.355794][T14979] dput+0x2f/0x420 [ 266.359507][T14979] fsnotify_parent+0x145/0x180 [ 266.364347][T14979] fsnotify_perm+0x1b9/0x250 [ 266.368949][T14979] security_file_permission+0x87/0xa0 [ 266.374307][T14979] rw_verify_area+0x12c/0x240 [ 266.378978][T14979] splice_direct_to_actor+0x23a/0x660 [ 266.384447][T14979] do_splice_direct+0xf2/0x170 [ 266.389220][T14979] do_sendfile+0x562/0xb10 [ 266.393729][T14979] __x64_sys_sendfile64+0xa9/0x130 [ 266.398825][T14979] do_syscall_64+0x51/0xb0 [ 266.403228][T14979] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.409182][T14979] [ 266.411509][T14979] Reported by Kernel Concurrency Sanitizer on: [ 266.417650][T14979] CPU: 1 PID: 14979 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 266.426300][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.436334][T14979] ================================================================== [ 266.444366][T14979] Kernel panic - not syncing: panic_on_warn set ... [ 266.451114][T14979] CPU: 1 PID: 14979 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 266.459762][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.470231][T14979] Call Trace: [ 266.473513][T14979] dump_stack+0x10f/0x19d [ 266.477831][T14979] panic+0x207/0x64a [ 266.481732][T14979] ? vprintk_emit+0x44a/0x4f0 [ 266.487040][T14979] kcsan_report+0x684/0x690 [ 266.491845][T14979] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 266.497584][T14979] ? dput+0x2f/0x420 [ 266.501488][T14979] ? fsnotify_parent+0x145/0x180 [ 266.506509][T14979] ? fsnotify_perm+0x1b9/0x250 [ 266.511253][T14979] ? security_file_permission+0x87/0xa0 [ 266.516920][T14979] ? rw_verify_area+0x12c/0x240 [ 266.521851][T14979] ? splice_direct_to_actor+0x23a/0x660 [ 266.527500][T14979] ? do_splice_direct+0xf2/0x170 [ 266.532411][T14979] ? do_sendfile+0x562/0xb10 [ 266.536982][T14979] ? __x64_sys_sendfile64+0xa9/0x130 [ 266.542241][T14979] ? do_syscall_64+0x51/0xb0 [ 266.547065][T14979] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.553231][T14979] ? debug_smp_processor_id+0x18/0x20 [ 266.558586][T14979] ? lockref_get_not_zero+0xf5/0x190 [ 266.563850][T14979] ? lockref_get_not_zero+0xf5/0x190 [ 266.569110][T14979] kcsan_setup_watchpoint+0x453/0x4d0 [ 266.574491][T14979] ? lockref_get_not_zero+0xf5/0x190 [ 266.579751][T14979] dput+0x2f/0x420 [ 266.583464][T14979] ? fsnotify_parent+0x13a/0x180 [ 266.588393][T14979] fsnotify_parent+0x145/0x180 [ 266.593143][T14979] fsnotify_perm+0x1b9/0x250 [ 266.597719][T14979] security_file_permission+0x87/0xa0 [ 266.603081][T14979] rw_verify_area+0x12c/0x240 [ 266.607763][T14979] splice_direct_to_actor+0x23a/0x660 [ 266.613444][T14979] ? do_splice_direct+0x170/0x170 [ 266.618449][T14979] do_splice_direct+0xf2/0x170 [ 266.623189][T14979] ? check_preemption_disabled+0x70/0x140 [ 266.629106][T14979] do_sendfile+0x562/0xb10 [ 266.633523][T14979] __x64_sys_sendfile64+0xa9/0x130 [ 266.638837][T14979] do_syscall_64+0x51/0xb0 [ 266.643238][T14979] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.649202][T14979] RIP: 0033:0x45cba9 [ 266.653076][T14979] Code: Bad RIP value. [ 266.657144][T14979] RSP: 002b:00007f0fc808bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.665527][T14979] RAX: ffffffffffffffda RBX: 00000000004fd960 RCX: 000000000045cba9 [ 266.673516][T14979] RDX: 0000000020000200 RSI: 0000000000000007 RDI: 0000000000000007 [ 266.681779][T14979] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 266.689731][T14979] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff [ 266.697880][T14979] R13: 0000000000000906 R14: 00000000004cbec4 R15: 00007f0fc808c6d4 [ 266.707762][T14979] Kernel Offset: disabled [ 266.712098][T14979] Rebooting in 86400 seconds..