x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 415.793598][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 415.881993][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.934663][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 415.951535][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.995163][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.004811][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 416.050552][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.136110][ T9320] usb 2-1: config 0 descriptor?? [ 416.423780][ T7] usb 2-1: USB disconnect, device number 15 [ 416.435202][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:58:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) 00:58:27 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c00"], 0x74}}, 0x0) 00:58:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$udf(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:27 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c00"], 0x74}}, 0x0) 00:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000"], 0x74}}, 0x0) [ 417.415190][ T9841] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 417.465995][ T9795] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 417.534644][T13297] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000"], 0x74}}, 0x0) [ 417.675705][ T9841] usb 1-1: Using ep0 maxpacket: 8 [ 417.705318][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 417.815817][ T9841] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 417.823953][ T9841] usb 1-1: config 0 has no interface number 0 [ 417.825470][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 417.833202][ T9841] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 417.850074][ T9841] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.863110][ T9841] usb 1-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.887345][ T9795] usb 2-1: config 0 has no interface number 0 [ 417.887907][ T9841] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 417.907228][T13300] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000"], 0x74}}, 0x0) [ 417.940961][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 417.945094][ T9841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:58:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 417.994599][ T9841] usb 1-1: config 0 descriptor?? [ 418.034046][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 418.046203][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.072798][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 418.085615][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.102302][ T9795] usb 2-1: config 0 descriptor?? 00:58:28 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 418.220896][T13312] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.350622][ T9795] usb 2-1: USB disconnect, device number 16 [ 418.365124][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 418.373304][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 418.480711][ T9841] usb 1-1: USB disconnect, device number 14 [ 418.486762][ C1] xpad 1-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 418.486816][ C1] xpad 1-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:58:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) 00:58:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008"], 0x74}}, 0x0) 00:58:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 418.939318][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.287033][ T9841] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 419.365338][ T9741] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 419.535222][ T9841] usb 1-1: Using ep0 maxpacket: 8 [ 419.665402][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 419.670618][ T9841] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 419.679098][ T9841] usb 1-1: config 0 has no interface number 0 [ 419.685799][ T9841] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 419.697528][ T9841] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.709985][ T9841] usb 1-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.724360][ T9841] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 419.733858][ T9841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.749188][ T9841] usb 1-1: config 0 descriptor?? [ 419.795267][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 419.807570][ T9741] usb 2-1: config 0 has no interface number 0 [ 419.821455][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 419.834755][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.846340][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.859823][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 419.869520][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.880723][ T9741] usb 2-1: config 0 descriptor?? [ 419.999415][ T9741] usb 1-1: USB disconnect, device number 15 [ 420.015134][ C1] xpad 1-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:58:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008"], 0x74}}, 0x0) 00:58:30 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 00:58:30 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 420.129864][ T3006] usb 2-1: USB disconnect, device number 17 [ 420.155101][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 420.160358][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.203682][T13380] fuse: Bad value for 'fd' 00:58:31 executing program 2: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:31 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008"], 0x74}}, 0x0) [ 420.614915][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:31 executing program 2: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 420.669518][T13403] fuse: Bad value for 'fd' 00:58:31 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:31 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x9d25a000) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 00:58:31 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008000500"], 0x74}}, 0x0) [ 421.065290][T13413] fuse: Bad value for 'fd' [ 421.102910][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.178772][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:32 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:32 executing program 2: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:32 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008000500"], 0x74}}, 0x0) [ 421.504036][T13423] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:32 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:32 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 421.608095][T13423] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:32 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) 00:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c73000000003000028008000500"], 0x74}}, 0x0) 00:58:32 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 422.031929][T13439] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.115013][T13439] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:33 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='s']) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 00:58:33 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:33 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c7300000000300002800800050000fa"], 0x74}}, 0x0) 00:58:33 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:33 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 422.902280][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.959860][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:33 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c7300000000300002800800050000fa"], 0x74}}, 0x0) [ 423.205090][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.256630][T13470] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:58:34 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000030000100000000000000000000000000600001005c000100090001006d706c7300000000300002800800050000fa"], 0x74}}, 0x0) 00:58:34 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x16, 0x1, &(0x7f0000000000)="86"}) 00:58:34 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:34 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[{&(0x7f0000000480)='9', 0x1, 0x100000001}, {&(0x7f00000004c0)="c5", 0x1}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}], 0x0, 0x0) 00:58:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) [ 424.312133][T13499] loop4: detected capacity change from 264192 to 0 [ 424.439450][T13499] loop4: detected capacity change from 264192 to 0 00:58:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:35 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:35 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) 00:58:35 executing program 4: kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) 00:58:35 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101002, 0x0) 00:58:35 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:58:36 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) connect$can_bcm(r2, 0x0, 0x0) [ 425.436894][ T9741] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 425.447328][T13530] fuse: Bad value for 'fd' 00:58:36 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:36 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) [ 425.705448][ T9741] usb 2-1: Using ep0 maxpacket: 8 00:58:36 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x12000020) [ 425.767802][T13549] fuse: Bad value for 'fd' [ 425.847776][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 425.870300][ T9741] usb 2-1: config 0 has no interface number 0 [ 425.897941][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.919797][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.938900][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.962976][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 425.974364][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.995001][ T9741] usb 2-1: config 0 descriptor?? [ 426.256843][ T3006] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input14 [ 426.450883][ T9784] usb 2-1: USB disconnect, device number 18 [ 426.473724][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 426.498587][ T9784] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:37 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x0) 00:58:37 executing program 4: syz_io_uring_setup(0x650b, &(0x7f0000000380)={0x0, 0x6be3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:58:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:37 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:38 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) [ 427.339971][T13592] fuse: Bad value for 'fd' 00:58:38 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:58:38 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000200)) [ 427.539877][ T3006] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 427.787308][T13607] fuse: Invalid rootmode 00:58:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001580), &(0x7f00000016c0)=0x4) [ 427.825377][ T3006] usb 2-1: Using ep0 maxpacket: 8 00:58:38 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:38 executing program 0: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000480)) [ 427.965797][ T3006] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 427.973946][ T3006] usb 2-1: config 0 has no interface number 0 [ 428.049511][ T3006] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 428.121159][T13613] fuse: Invalid rootmode 00:58:38 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 428.142493][ T3006] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 00:58:39 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 428.204171][ T3006] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 00:58:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={&(0x7f0000001dc0), 0xc, &(0x7f0000001e40)={0x0}}, 0x0) [ 428.291171][ T3006] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 428.327466][ T3006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.386195][ T3006] usb 2-1: config 0 descriptor?? 00:58:39 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(0x0, &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 428.667326][ T9841] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input15 [ 428.863860][ T9841] usb 2-1: USB disconnect, device number 19 [ 428.870012][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 428.870064][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 428.919311][ T9841] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f00000016c0)) 00:58:40 executing program 0: syz_io_uring_setup(0x650b, &(0x7f0000000380)={0x0, 0x6be3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 00:58:40 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:58:40 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(0x0, &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:40 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:40 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(0x0, &(0x7f0000002040)='./file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={&(0x7f0000001dc0), 0xc, 0x0}, 0x0) 00:58:40 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) [ 429.855615][ T9741] usb 2-1: new high-speed USB device number 20 using dummy_hcd 00:58:40 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7000006, 0x10, r0, 0x8000000) 00:58:40 executing program 4: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000680)='+\\*{]\x00', 0x0) [ 430.095386][ T9741] usb 2-1: Using ep0 maxpacket: 8 00:58:40 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 430.236047][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 430.259668][ T9741] usb 2-1: config 0 has no interface number 0 [ 430.300307][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 430.367205][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.403209][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 430.436913][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 430.478465][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.503998][ T9741] usb 2-1: config 0 descriptor?? [ 430.777343][ T9741] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input16 [ 430.973649][ T9741] usb 2-1: USB disconnect, device number 20 [ 430.985484][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 431.000065][ T9741] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:42 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:42 executing program 0: socket(0x0, 0x4, 0x0) syz_genetlink_get_family_id$devlink(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x28000) 00:58:42 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:42 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:58:42 executing program 4: syz_io_uring_setup(0x650b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x9b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:58:42 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x12000020) [ 432.045602][ T9795] usb 2-1: new high-speed USB device number 21 using dummy_hcd 00:58:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)="f0"}) 00:58:42 executing program 4: clone(0x0, 0x0, 0x0, &(0x7f00000034c0), &(0x7f0000003500)="1f") [ 432.285552][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 432.405914][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 432.414071][ T9795] usb 2-1: config 0 has no interface number 0 00:58:43 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) socketpair(0x8, 0x0, 0x6, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) [ 432.482079][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 00:58:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 432.579246][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.639663][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 432.693088][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 432.725533][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.780076][ T9795] usb 2-1: config 0 descriptor?? [ 433.077364][ T9795] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input17 [ 433.263158][ T9795] usb 2-1: USB disconnect, device number 21 [ 433.275453][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 433.283761][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 433.375520][ T9795] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:44 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x40e600, 0x0) 00:58:44 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:44 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 00:58:44 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:44 executing program 4: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:58:44 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, 0x0) [ 434.235633][ T9795] usb 2-1: new high-speed USB device number 22 using dummy_hcd 00:58:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/crypto\x00', 0x0, 0x0) 00:58:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 434.505555][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 434.626054][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 434.637889][ T9795] usb 2-1: config 0 has no interface number 0 [ 434.699075][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 00:58:45 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) [ 434.845888][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 00:58:45 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) [ 434.955094][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 435.085589][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 435.125247][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.155565][ T9795] usb 2-1: config 0 descriptor?? [ 435.437315][ T9784] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input18 [ 435.624154][ T9784] usb 2-1: USB disconnect, device number 22 [ 435.635570][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 435.651137][ T9784] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 00:58:47 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:47 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x141041, 0x0) 00:58:47 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) 00:58:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 00:58:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001ec0)={0x50000008}) 00:58:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 436.759113][ T9841] usb 2-1: new high-speed USB device number 23 using dummy_hcd 00:58:47 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000640)="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", 0x200}], 0x0, 0x0) 00:58:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) readahead(r0, 0x0, 0xfffffffffffffffe) [ 437.019428][T13899] loop0: detected capacity change from 1 to 0 [ 437.026131][ T9841] usb 2-1: Using ep0 maxpacket: 8 [ 437.143521][T13899] loop0: detected capacity change from 1 to 0 [ 437.155645][ T9841] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 437.163780][ T9841] usb 2-1: config 0 has no interface number 0 [ 437.170107][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 437.181385][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.192472][ T9841] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 437.215613][ T9841] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 437.224707][ T9841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.275316][ T9841] usb 2-1: config 0 descriptor?? 00:58:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x0, 0x0) [ 437.588299][ T9841] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input19 [ 437.775331][ T7] usb 2-1: USB disconnect, device number 23 [ 437.785974][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 437.797179][ T7] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:49 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:49 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) 00:58:49 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 00:58:49 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000580)) 00:58:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:49 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)) 00:58:49 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 00:58:49 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) [ 438.785712][ T9741] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 439.025827][ T9741] usb 2-1: Using ep0 maxpacket: 8 00:58:49 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x88300, 0x0) 00:58:49 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x86000, 0x0) [ 439.146178][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 439.158909][ T9741] usb 2-1: config 0 has no interface number 0 [ 439.212230][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 00:58:50 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 439.272884][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 00:58:50 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) [ 439.356272][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 00:58:50 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000480)='9', 0x1, 0x100000001}, {&(0x7f00000004c0)="c5", 0x1}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}, {&(0x7f0000000680)='S', 0x1}], 0x0, 0x0) [ 439.441029][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 439.483120][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.524263][ T9741] usb 2-1: config 0 descriptor?? 00:58:50 executing program 0: socket$inet6(0xa, 0x3, 0xe5) 00:58:50 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 439.797763][ T9741] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input20 [ 439.994376][ T9741] usb 2-1: USB disconnect, device number 24 [ 440.015600][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 440.023888][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 440.050245][ T9741] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:51 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 00:58:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000001800)) 00:58:51 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:51 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 00:58:51 executing program 4: syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:58:51 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:58:51 executing program 0: inotify_init() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) 00:58:51 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f0000000980)) [ 441.116072][ T9784] usb 2-1: new high-speed USB device number 25 using dummy_hcd 00:58:52 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fchdir(r0) [ 441.365859][ T9784] usb 2-1: Using ep0 maxpacket: 8 00:58:52 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000540)) [ 441.486109][ T9784] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 441.499299][ T9784] usb 2-1: config 0 has no interface number 0 [ 441.544786][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 441.647349][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.737265][ T9784] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 441.823207][ T9784] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 441.882924][ T9784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.915918][ T9741] Bluetooth: hci0: command 0x0406 tx timeout [ 441.926858][ T9741] Bluetooth: hci1: command 0x0406 tx timeout [ 441.949925][ T9784] usb 2-1: config 0 descriptor?? [ 441.996160][ T9741] Bluetooth: hci2: command 0x0406 tx timeout [ 442.051427][ T9741] Bluetooth: hci3: command 0x0406 tx timeout [ 442.095947][ T9741] Bluetooth: hci4: command 0x0406 tx timeout [ 442.107055][ T9741] Bluetooth: hci5: command 0x0406 tx timeout [ 442.227682][ T9784] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input21 [ 442.412938][ T8604] usb 2-1: USB disconnect, device number 25 [ 442.425726][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 442.434188][ T8604] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:53 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001380)={0x6, 0x18, [0x2, 0x4, 0x10001, 0x3], &(0x7f0000001340)=[0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FIOCLEX(r0, 0x5451) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x1ff, 0x83) 00:58:53 executing program 0: openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) 00:58:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 00:58:53 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:53 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:58:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:54 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) 00:58:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 00:58:54 executing program 4: clock_gettime(0x7, &(0x7f00000002c0)) [ 443.505703][ T9784] usb 2-1: new high-speed USB device number 26 using dummy_hcd 00:58:54 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) 00:58:54 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x101041) [ 443.785826][ T9784] usb 2-1: Using ep0 maxpacket: 8 00:58:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)="f0cb925d22bd1d4d"}) [ 443.906138][ T9784] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 443.928036][ T9784] usb 2-1: config 0 has no interface number 0 00:58:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 444.001674][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 444.096717][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 00:58:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b00)) [ 444.188290][ T9784] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 00:58:55 executing program 0: clone(0x0, &(0x7f0000002480), 0x0, 0x0, 0x0) 00:58:55 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) [ 444.305910][ T9784] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 444.315013][ T9784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.431684][ T9784] usb 2-1: config 0 descriptor?? 00:58:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 444.737520][ T9784] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input22 [ 444.927843][ T8604] usb 2-1: USB disconnect, device number 26 [ 444.945866][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 444.955061][ T8604] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:58:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:58:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) 00:58:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:56 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) 00:58:56 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:58:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:58:56 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 446.065882][ T9784] usb 2-1: new high-speed USB device number 27 using dummy_hcd 00:58:56 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 00:58:56 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46800) 00:58:57 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4300, 0x0) [ 446.315821][ T9784] usb 2-1: Using ep0 maxpacket: 8 00:58:57 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000980)) [ 446.466594][ T9784] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 446.474742][ T9784] usb 2-1: config 0 has no interface number 0 [ 446.519927][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 00:58:57 executing program 4: openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) 00:58:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 446.603152][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 00:58:57 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) [ 446.682567][ T9784] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 446.786537][ T9784] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 446.836574][ T9784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.857575][ T9784] usb 2-1: config 0 descriptor?? [ 447.314888][ T9784] usb 2-1: USB disconnect, device number 27 [ 447.320949][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 447.321005][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:58:58 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x2) 00:58:58 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 00:58:58 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:58:58 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:58:58 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) 00:58:59 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:58:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 00:58:59 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 00:58:59 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101200, 0x0) 00:58:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000003c80)={0x16, 0x3, &(0x7f0000003900)=@framed, &(0x7f0000003980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 448.496100][ T9811] usb 2-1: new high-speed USB device number 28 using dummy_hcd 00:58:59 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101200, 0x0) [ 448.768176][ T9811] usb 2-1: Using ep0 maxpacket: 8 [ 448.886914][ T9811] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 448.896276][ T9811] usb 2-1: config 0 has no interface number 0 [ 448.917735][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 448.968075][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 448.981692][ T9811] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 448.997523][ T9811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 449.007738][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.024656][ T9811] usb 2-1: config 0 descriptor?? [ 449.483484][ T7] usb 2-1: USB disconnect, device number 28 [ 449.495955][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:00 executing program 0: socketpair(0x1e, 0x0, 0xffff, &(0x7f0000000000)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 00:59:00 executing program 4: syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x80000000, 0x10002) 00:59:00 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:00 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000002000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) 00:59:00 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:01 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:01 executing program 4: connect$netrom(0xffffffffffffffff, 0x0, 0x0) 00:59:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:01 executing program 4: r0 = inotify_init() ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x12000020) [ 450.465936][ T9841] usb 2-1: new high-speed USB device number 29 using dummy_hcd 00:59:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:01 executing program 4: syz_mount_image$qnx6(0x0, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[{&(0x7f0000000200)="fbec", 0x2, 0xfff}, {&(0x7f0000000640)="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", 0x9c1}], 0x0, 0x0) [ 450.699918][T14318] loop4: detected capacity change from 15 to 0 [ 450.717258][ T9841] usb 2-1: Using ep0 maxpacket: 8 [ 450.797238][T14318] loop4: detected capacity change from 15 to 0 [ 450.856375][ T9841] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 450.864620][ T9841] usb 2-1: config 0 has no interface number 0 [ 450.872722][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 450.885170][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.897743][ T9841] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 450.912596][ T9841] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 450.922720][ T9841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.938924][ T9841] usb 2-1: config 0 descriptor?? [ 451.381634][ T3006] usb 2-1: USB disconnect, device number 29 [ 451.395987][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 451.404314][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:59:02 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) 00:59:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:02 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 00:59:02 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x60e02, 0x0) 00:59:03 executing program 4: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn,flock']) 00:59:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') [ 452.458285][T14368] afs: Bad value for 'flock' [ 452.492108][T14368] afs: Bad value for 'flock' [ 452.506462][ T9741] usb 2-1: new high-speed USB device number 30 using dummy_hcd 00:59:03 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 00:59:03 executing program 4: syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) [ 452.766162][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 452.886442][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 452.895174][ T9741] usb 2-1: config 0 has no interface number 0 [ 452.905375][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 452.922582][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.934783][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 452.965443][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 452.985238][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.015808][ T9741] usb 2-1: config 0 descriptor?? [ 453.472318][ T9811] usb 2-1: USB disconnect, device number 30 [ 453.486029][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:59:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f00000016c0)) 00:59:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:04 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x16+\\\x00', 0x0, 0xffffffffffffff9c) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x28002, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)={0x0, 0x4, 0x0, [{0x4, 0x6, 0x6, 0x4, 0xff, 0x4, 0x3}, {0x7, 0x7, 0x890000, 0x9d, 0x1, 0x7, 0x9}, {0x2, 0x7, 0x4, 0xc2, 0x3f, 0x3, 0x80}, {0x9, 0x1, 0x7, 0x0, 0x0, 0xff, 0x9}]}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000600)={0x80}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000640)={0x1}) 00:59:04 executing program 4: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x11400a0, &(0x7f0000000340)) 00:59:04 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:04 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000003c80)={0x0, 0x0, 0x0, &(0x7f0000003980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:04 executing program 0: socket$rxrpc(0x21, 0x2, 0x0) 00:59:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x224}, 0x40) 00:59:05 executing program 3: clone(0x0, &(0x7f0000002480)="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", 0x0, &(0x7f00000034c0), &(0x7f0000003500)="1f18") 00:59:05 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 00:59:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:05 executing program 4: syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) [ 454.436167][ T9811] usb 2-1: new high-speed USB device number 31 using dummy_hcd 00:59:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0}}, 0x0) 00:59:05 executing program 3: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', 0x0, 0x0, 0x3, &(0x7f0000000900)=[{&(0x7f0000000480)="399460ae", 0x4, 0x100000001}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}], 0x0, &(0x7f0000000a80)={[{@flock_strict='flock=strict'}], [{@obj_type={'obj_type', 0x3d, 'flock=write'}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_gt={'fowner>'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_user={'subj_user', 0x3d, '#Q\\'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@audit='audit'}]}) [ 454.686269][ T9811] usb 2-1: Using ep0 maxpacket: 8 [ 454.766391][T14441] loop3: detected capacity change from 264192 to 0 [ 454.806612][ T9811] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 454.818496][ T9811] usb 2-1: config 0 has no interface number 0 [ 454.832440][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.853509][T14441] loop3: detected capacity change from 264192 to 0 [ 454.854568][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 454.889295][ T9811] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 00:59:05 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 454.906384][ T9811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 454.915645][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.931105][ T9811] usb 2-1: config 0 descriptor?? [ 455.075053][T14458] fuse: Bad value for 'fd' [ 455.388564][ T9841] usb 2-1: USB disconnect, device number 31 [ 455.406085][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 00:59:06 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:06 executing program 4: getresuid(&(0x7f0000000800), &(0x7f0000000840), 0x0) 00:59:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8000, &(0x7f0000000780)=ANY=[]) 00:59:06 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4300, 0x0) 00:59:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 456.017763][T14480] fuse: Bad value for 'fd' 00:59:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:06 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:59:06 executing program 4: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000a80)) 00:59:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1d3c, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 00:59:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 456.331904][T14504] fuse: Bad value for 'fd' [ 456.346288][ T9841] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 456.598689][ T9841] usb 2-1: Using ep0 maxpacket: 8 [ 456.718931][ T9841] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 456.736230][ T9841] usb 2-1: config 0 has no interface number 0 [ 456.760000][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 456.798133][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.847166][ T9841] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 456.870807][ T9841] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 456.895686][ T9841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.916131][ T9841] usb 2-1: config 0 descriptor?? [ 457.372352][ T7] usb 2-1: USB disconnect, device number 32 [ 457.386197][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 00:59:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:08 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f00000001c0)) 00:59:08 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:08 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000a80)='fou\x00') 00:59:08 executing program 3: syz_io_uring_setup(0x4da7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x122}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:08 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:08 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0}) 00:59:09 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x73) 00:59:09 executing program 4: r0 = inotify_init() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x78) inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x12000020) socket$inet_udp(0x2, 0x2, 0x0) 00:59:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 458.308310][ T9741] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 458.566399][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 458.686673][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 458.706426][ T9741] usb 2-1: config 0 has no interface number 0 [ 458.726415][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 458.755664][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.769180][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 458.783898][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 458.795708][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.808742][ T9741] usb 2-1: config 0 descriptor?? [ 459.067851][ T9841] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input23 [ 459.254955][ T9841] usb 2-1: USB disconnect, device number 33 [ 459.266213][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 459.275902][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 459.311885][ T9841] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:10 executing program 0: socketpair(0x1, 0x5, 0x3, &(0x7f0000000980)) 00:59:10 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x28002, 0x0) 00:59:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:10 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[{&(0x7f00000004c0)="c5", 0x1}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}], 0x0, 0x0) [ 459.896609][T14611] loop4: detected capacity change from 109 to 0 00:59:10 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 460.004495][T14611] loop4: detected capacity change from 109 to 0 00:59:10 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@source={'source', 0x3d, '/dev/input/event#\x00'}}]}) 00:59:10 executing program 0: set_robust_list(&(0x7f0000000540), 0x18) 00:59:10 executing program 4: socket$inet6(0xa, 0x5, 0x8) [ 460.216268][ T7] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 460.226826][T14628] kAFS: unparsable volume name [ 460.263770][T14628] kAFS: unparsable volume name [ 460.466467][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 460.586716][ T7] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 460.602554][ T7] usb 2-1: config 0 has no interface number 0 [ 460.612823][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 460.630226][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.643842][ T7] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 460.658539][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 460.670494][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.689914][ T7] usb 2-1: config 0 descriptor?? [ 460.958367][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input24 [ 461.145092][ T7] usb 2-1: USB disconnect, device number 34 [ 461.156373][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 461.165640][ T7] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:12 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:12 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:12 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:59:12 executing program 0: openat$rtc(0xffffffffffffff9c, 0x0, 0x189280, 0x0) 00:59:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)) 00:59:12 executing program 4: syz_mount_image$qnx6(0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f0000000200)="fb", 0x1, 0xfff}], 0x0, 0x0) 00:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:12 executing program 0: socketpair(0x22, 0x0, 0x8, &(0x7f0000000000)) 00:59:12 executing program 3: syz_io_uring_setup(0x4cbf, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 00:59:12 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 461.973593][T14693] loop4: detected capacity change from 15 to 0 [ 462.078559][ T9741] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 462.138704][T14693] loop4: detected capacity change from 15 to 0 [ 462.336470][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 462.476594][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 462.485431][ T9741] usb 2-1: config 0 has no interface number 0 [ 462.505705][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 462.536324][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 462.556518][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 462.586309][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 462.606344][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.628363][ T9741] usb 2-1: config 0 descriptor?? [ 462.897962][ T8604] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input25 [ 463.084418][ T8604] usb 2-1: USB disconnect, device number 35 [ 463.091852][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 463.091916][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 463.145488][ T8604] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) 00:59:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup/syz1\x00', 0x200002, 0x0) 00:59:14 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:14 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x208440) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 00:59:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:14 executing program 3: clock_gettime(0x0, &(0x7f00000002c0)) 00:59:14 executing program 4: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 00:59:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0x0, 0x0) 00:59:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:14 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_usb_connect(0x0, 0x48, 0x0, 0x0) [ 464.076744][ T7] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 464.326505][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 464.446757][ T7] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 464.471067][ T7] usb 2-1: config 0 has no interface number 0 [ 464.496592][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 464.522587][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.540859][ T7] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.557304][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 464.569758][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.586107][ T7] usb 2-1: config 0 descriptor?? [ 464.869052][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input26 [ 465.054195][ T7] usb 2-1: USB disconnect, device number 36 [ 465.066513][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 465.075523][ T7] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 00:59:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:59:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:16 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:16 executing program 4: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) recvmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0x0, 0x0, [0x4], r2}, 0x40) 00:59:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 00:59:16 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:16 executing program 3: syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff81000800080045000000000090"], 0x0) 00:59:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) [ 465.948872][T14827] fuse: Bad value for 'fd' 00:59:16 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 466.076680][ T7] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 466.244089][T14838] fuse: Bad value for 'fd' [ 466.356546][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 466.487021][ T7] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 466.497583][ T7] usb 2-1: config 0 has no interface number 0 [ 466.512261][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 466.533172][ T7] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.544753][ T7] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 466.579986][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 466.594307][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.610246][ T7] usb 2-1: config 0 descriptor?? [ 466.871075][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input27 [ 467.052195][ T9741] usb 2-1: USB disconnect, device number 37 [ 467.056467][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 467.073544][ T9741] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:18 executing program 3: syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x1) 00:59:18 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer\x00', 0x1d2a7d8d37219816, 0x0) 00:59:18 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000480)) 00:59:18 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 467.700087][T14880] fuse: Bad value for 'fd' 00:59:18 executing program 0: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) 00:59:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x38) 00:59:18 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:18 executing program 3: syz_open_dev$hidraw(&(0x7f00000013c0)='/dev/hidraw#\x00', 0x0, 0x0) 00:59:18 executing program 0: syz_mount_image$qnx6(0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f0000000200)="fbec", 0x2, 0xfff}], 0x0, 0x0) [ 468.022034][T14895] fuse: Invalid rootmode [ 468.036630][ T9741] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 468.182602][T14899] loop0: detected capacity change from 15 to 0 [ 468.276621][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 468.406828][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 468.414970][ T9741] usb 2-1: config 0 has no interface number 0 [ 468.431505][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 468.454860][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.466094][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 468.496818][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 468.525236][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.551968][ T9741] usb 2-1: config 0 descriptor?? [ 468.818205][ T9741] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input28 [ 469.006291][ T7] usb 2-1: USB disconnect, device number 38 [ 469.016669][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 469.024897][ T7] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:20 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0xa) 00:59:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pread64(r0, 0x0, 0x0, 0x0) 00:59:20 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:20 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) syncfs(r0) [ 469.613674][T14940] fuse: Invalid rootmode 00:59:20 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x11d602, 0x0) 00:59:20 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:20 executing program 4: clone(0x80112000, 0x0, 0x0, 0x0, 0x0) 00:59:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:20 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003c40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 469.923259][T14958] fuse: Invalid rootmode 00:59:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {}, @device_b, @device_a, @random="1588d07a254b"}}, 0x0, @val={0x8c, 0x18, {0x0, "b8283f9ac993", @long="e1fc9144bdc89fb849e26815a046d970"}}}}]}, 0x58}}, 0x0) [ 470.016852][ T9784] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 470.318348][ T9784] usb 2-1: Using ep0 maxpacket: 8 [ 470.477010][ T9784] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 470.494449][ T9784] usb 2-1: config 0 has no interface number 0 [ 470.510157][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 470.542563][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.580599][ T9784] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.604313][ T9784] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 470.614063][ T9784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.642298][ T9784] usb 2-1: config 0 descriptor?? [ 470.908324][ T9784] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input29 [ 471.094870][ T9841] usb 2-1: USB disconnect, device number 39 [ 471.096585][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 471.110165][ T9841] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:22 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x722c1, 0x0) 00:59:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) getresuid(&(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)) 00:59:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {}, @device_b, @device_a, @random="1588d07a254b"}}, 0x0, @val={0x8c, 0x18, {0x0, "b8283f9ac993", @long="e1fc9144bdc89fb849e26815a046d970"}}}}]}, 0x58}}, 0x0) 00:59:22 executing program 3: syz_io_uring_setup(0x4cbf, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 00:59:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x1ff, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000380)=""/16) 00:59:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:22 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/sequencer\x00', 0x224082, 0x0) 00:59:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v) 00:59:22 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5e00000000000000, 0xa8a03) [ 472.086550][ T9741] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 472.337490][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 472.456910][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 472.468427][ T9741] usb 2-1: config 0 has no interface number 0 [ 472.474781][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 472.486930][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.499896][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 472.521314][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 472.547968][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.587841][ T9741] usb 2-1: config 0 descriptor?? [ 472.858204][ T8604] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input30 [ 473.042041][ T9784] usb 2-1: USB disconnect, device number 40 [ 473.056455][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 473.069445][ T9784] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:24 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:59:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:24 executing program 3: r0 = getpid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) 00:59:24 executing program 4: syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/crypto\x00', 0x0, 0x0) 00:59:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:24 executing program 0: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 00:59:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FIOCLEX(r0, 0x5451) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x83) 00:59:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 00:59:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) 00:59:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1d3c, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x40) [ 473.976525][ T8604] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 474.246466][ T8604] usb 2-1: Using ep0 maxpacket: 8 [ 474.376631][ T8604] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 474.391120][ T8604] usb 2-1: config 0 has no interface number 0 [ 474.421340][ T8604] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 474.452247][ T8604] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 474.505459][ T8604] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 474.529322][ T8604] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 474.544460][ T8604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.570862][ T8604] usb 2-1: config 0 descriptor?? [ 474.827734][ T9841] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input31 [ 475.022261][ T9811] usb 2-1: USB disconnect, device number 41 [ 475.036166][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 475.044448][ T9811] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 00:59:26 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x1, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x83) 00:59:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:26 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) syz_genetlink_get_family_id$devlink(0x0) clone(0x2000000, 0x0, 0x0, &(0x7f00000034c0), &(0x7f0000003500)) 00:59:26 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0xa591, 0x0) 00:59:26 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:26 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/crypto\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setresuid(0xee01, 0xee00, 0x0) 00:59:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1004}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x6c00000000000000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 00:59:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x600, 0x0) 00:59:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:26 executing program 0: syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x0, 0x2440c0) 00:59:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:27 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000020) 00:59:27 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x3) 00:59:27 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) 00:59:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:27 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:27 executing program 0: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:59:27 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fstat(r0, 0x0) 00:59:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:27 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) 00:59:27 executing program 4: socket$rxrpc(0x21, 0x2, 0x2) 00:59:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:27 executing program 0: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@flock_strict='flock=strict'}], [{@obj_type={'obj_type', 0x3d, 'flock=write'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) 00:59:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@generic]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:27 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000280)) [ 477.107759][T15229] afs: Unknown parameter 'obj_type' [ 477.130491][T15229] afs: Unknown parameter 'obj_type' 00:59:28 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0xc020660b, 0x0) 00:59:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:28 executing program 0: openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:28 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:28 executing program 4: syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x2) 00:59:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x34}}, 0x0) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) 00:59:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:28 executing program 0: syz_mount_image$qnx6(0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f0000000640)="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", 0x9c1}], 0x0, 0x0) 00:59:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:28 executing program 3: waitid(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)) [ 477.912332][T15263] loop0: detected capacity change from 4 to 0 [ 478.034813][T15263] loop0: detected capacity change from 4 to 0 [ 478.105805][ T9811] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 478.315830][ T9811] usb 2-1: device descriptor read/64, error 18 00:59:29 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x6c00000000000000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 00:59:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:29 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[{&(0x7f00000004c0)="c5", 0x1}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}, {&(0x7f0000000680)='S', 0x1}], 0x0, 0x0) 00:59:29 executing program 3: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) [ 478.585775][ T9811] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 478.724803][T15285] loop0: detected capacity change from 109 to 0 [ 478.796004][ T9811] usb 2-1: device descriptor read/64, error 18 [ 478.920912][T15285] loop0: detected capacity change from 109 to 0 [ 478.927866][ T9811] usb usb2-port1: attempt power cycle [ 479.635814][ T9811] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 479.820989][ T9811] usb 2-1: device descriptor read/8, error -61 [ 480.095745][ T9811] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 480.269705][ T9811] usb 2-1: device descriptor read/8, error -61 [ 480.396988][ T9811] usb usb2-port1: unable to enumerate USB device 00:59:31 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) 00:59:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:31 executing program 0: clock_gettime(0x0, &(0x7f0000000a00)) 00:59:31 executing program 3: setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) 00:59:31 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:31 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x8, 0x0, 0x0, &(0x7f0000000440)) 00:59:31 executing program 3: socket$inet6(0xa, 0x0, 0xfffffffc) 00:59:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 00:59:31 executing program 3: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)) 00:59:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 481.287683][T15341] kAFS: No cell specified [ 481.295499][ T9741] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 481.301300][T15341] kAFS: No cell specified [ 481.495465][ T9741] usb 2-1: device descriptor read/64, error 18 [ 481.767940][ T9741] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 481.987874][ T9741] usb 2-1: device descriptor read/64, error 18 [ 482.105846][ T9741] usb usb2-port1: attempt power cycle [ 482.815494][ T9741] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 482.985332][ T9741] usb 2-1: device descriptor read/8, error -61 [ 483.275288][ T9741] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 483.475443][ T9741] usb 2-1: device descriptor read/8, error -61 [ 483.595889][ T9741] usb usb2-port1: unable to enumerate USB device 00:59:34 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn,']) 00:59:34 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x1, 0xa0}) 00:59:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:34 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:34 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 00:59:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:34 executing program 4: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="666c6f636b3d6f70656e6166732c64796e2c666c6f636b3d7374726963742c6175746f63656c6c2c666c6f636b3d77726974653c736f757263653d2d262410252c64796e2c666f776e65723c86e534c5e8e59862698b60f4cb415fb7576d4a06b2177893401dcbbdf7bc91b5ae49a90667e081630ad77be1f9914e7ff1bd42607591746b2cfe52927fed36f9435eccb4d0b8a7b35410027526f299759c5e82fba2b43f4538bf929dfc94eeabb68094f4463df74dda4eab854a7f07c2dfdb3effdb22"]) 00:59:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:59:34 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x5e840, 0x0) 00:59:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) [ 484.313649][T15383] afs: Bad value for 'flock' [ 484.348390][T15383] afs: Bad value for 'flock' 00:59:35 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 00:59:35 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn,flock=strict,autocell,flock=']) 00:59:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) [ 484.435113][ T9811] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 484.579973][T15396] afs: Bad value for 'flock' [ 484.597386][T15396] afs: Bad value for 'flock' [ 484.635161][ T9811] usb 2-1: device descriptor read/64, error 18 [ 484.905052][ T9811] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 485.099580][ T9811] usb 2-1: device descriptor read/64, error 18 [ 485.242515][ T9811] usb usb2-port1: attempt power cycle [ 485.975080][ T9811] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 486.195433][ T9811] usb 2-1: device descriptor read/8, error -61 [ 486.465144][ T9811] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 486.645387][ T9811] usb 2-1: device descriptor read/8, error -61 [ 486.765556][ T9811] usb usb2-port1: unable to enumerate USB device 00:59:37 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 00:59:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000200)) 00:59:37 executing program 3: socketpair(0x1e, 0x0, 0xffff, &(0x7f0000000000)) 00:59:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:38 executing program 3: clone(0x0, 0x0, &(0x7f0000003480), 0x0, &(0x7f0000003500)="1f") 00:59:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:38 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100001f, 0x104010, r0, 0x0) 00:59:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:59:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x5452, &(0x7f00000005c0)=""/111) [ 487.584845][ T9741] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 487.804692][ T9741] usb 2-1: device descriptor read/64, error 18 [ 488.074924][ T9741] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 488.284888][ T9741] usb 2-1: device descriptor read/64, error 18 [ 488.415894][ T9741] usb usb2-port1: attempt power cycle [ 489.164609][ T9741] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 489.344765][ T9741] usb 2-1: device descriptor read/8, error -61 [ 489.625478][ T9741] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 489.824767][ T9741] usb 2-1: device descriptor read/8, error -61 [ 489.945505][ T9741] usb usb2-port1: unable to enumerate USB device 00:59:41 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x224, 0xffffffffffffffff, 0x5}, 0x40) 00:59:41 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0)) 00:59:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 00:59:41 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100), 0x4) 00:59:41 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:41 executing program 4: syz_io_uring_setup(0x4da7, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:59:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 00:59:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 00:59:41 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) 00:59:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)) 00:59:41 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1001, &(0x7f0000001640)=ANY=[]) [ 490.694436][ T7] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 490.895851][ T7] usb 2-1: device descriptor read/64, error 18 [ 491.164651][ T7] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 491.364488][ T7] usb 2-1: device descriptor read/64, error 18 [ 491.494649][ T7] usb usb2-port1: attempt power cycle [ 492.204339][ T7] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 492.374532][ T7] usb 2-1: device descriptor read/8, error -61 [ 492.644240][ T7] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 492.815057][ T7] usb 2-1: device descriptor read/8, error -61 [ 492.935666][ T7] usb usb2-port1: unable to enumerate USB device 00:59:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 00:59:44 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 00:59:44 executing program 0: syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x0, 0x0) 00:59:44 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:59:44 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:44 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000640)="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", 0x9c1}], 0x0, 0x0) 00:59:44 executing program 0: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) 00:59:44 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x240102, 0x0) 00:59:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) [ 493.634716][T15538] loop4: detected capacity change from 4 to 0 00:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) 00:59:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x12, 0xfd, 0x0, 0x1f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x40) [ 493.746397][T15538] loop4: detected capacity change from 4 to 0 [ 493.826130][ T7] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 494.014260][ T7] usb 2-1: device descriptor read/64, error 18 [ 494.284148][ T7] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 494.484297][ T7] usb 2-1: device descriptor read/64, error 18 [ 494.614282][ T7] usb usb2-port1: attempt power cycle [ 495.324201][ T7] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 495.494123][ T7] usb 2-1: device descriptor read/8, error -61 [ 495.764743][ T7] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 495.934183][ T7] usb 2-1: device descriptor read/8, error -61 [ 496.054812][ T7] usb usb2-port1: unable to enumerate USB device 00:59:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 00:59:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 00:59:47 executing program 3: io_uring_setup(0x4ac9, &(0x7f0000000000)={0x0, 0x0, 0x20}) 00:59:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x9, 0x0) ioctl$EVIOCGID(r0, 0x80084502, 0x0) 00:59:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:47 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) accept4$phonet_pipe(r0, 0x0, 0x0, 0x1000) 00:59:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 00:59:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:59:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 00:59:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 00:59:47 executing program 0: fchown(0xffffffffffffffff, 0x0, 0xee01) [ 496.994313][ T7] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 497.233909][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 497.354582][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.376399][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.417601][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 497.459218][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.502744][ T7] usb 2-1: config 0 descriptor?? [ 497.757025][ T9320] usb 2-1: USB disconnect, device number 66 00:59:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:49 executing program 4: socket$unix(0x1, 0x1, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 00:59:49 executing program 3: clone(0x0, 0x0, &(0x7f0000003480), 0x0, &(0x7f0000003500)) 00:59:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 00:59:49 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[{&(0x7f0000000480)='9', 0x1, 0x100000001}, {&(0x7f00000004c0)="c5", 0x1}], 0x0, 0x0) 00:59:49 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 498.376983][T15630] loop0: detected capacity change from 264192 to 0 00:59:49 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:49 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x6) 00:59:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 498.490631][T15630] loop0: detected capacity change from 264192 to 0 00:59:49 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:49 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000005c0), 0x0) 00:59:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000400)) [ 498.773765][ T9811] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 499.032619][ T9811] usb 2-1: Using ep0 maxpacket: 8 [ 499.154077][ T9811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.164893][ T9811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.174311][ T9811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 499.183684][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.193925][ T9811] usb 2-1: config 0 descriptor?? [ 499.455057][ T9811] usb 2-1: USB disconnect, device number 67 00:59:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:59:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:59:50 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:50 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 00:59:50 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:59:50 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:50 executing program 0: syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) 00:59:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x3) 00:59:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:59:51 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/user\x00') [ 500.433572][ T9795] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 500.713610][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 500.833903][ T9795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.850451][ T9795] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.880777][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 500.917032][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.941923][ T9795] usb 2-1: config 0 descriptor?? [ 501.207844][ T9795] usb 2-1: USB disconnect, device number 68 00:59:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 00:59:52 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:52 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x123000, 0x0) 00:59:52 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:52 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:52 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:52 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x2) 00:59:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:52 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) [ 502.154055][ T9320] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 502.403492][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 502.533918][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 502.547704][ T9320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.569953][ T9320] usb 2-1: config 0 has no interface number 0 [ 502.583484][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 502.594925][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 502.609077][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 502.636961][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.660050][ T9320] usb 2-1: config 0 descriptor?? 00:59:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:53 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) 00:59:53 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) socket(0x1d, 0x0, 0x0) 00:59:53 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}]}, 0x1c}}, 0x0) 00:59:53 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x0) [ 502.922199][ T8604] usb 2-1: USB disconnect, device number 69 00:59:53 executing program 0: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 503.060397][T15808] can: request_module (can-proto-0) failed. 00:59:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x6c00000000000000, 0x0) 00:59:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}]}, 0x1c}}, 0x0) 00:59:53 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:54 executing program 0: sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0xc461ec029709b81d) 00:59:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}]}, 0x1c}}, 0x0) [ 503.463452][ T8604] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 503.743378][ T8604] usb 2-1: Using ep0 maxpacket: 8 [ 503.882723][ T8604] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 503.902040][ T8604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.915474][ T8604] usb 2-1: config 0 has no interface number 0 [ 503.921746][ T8604] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 503.934446][ T8604] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 503.949337][ T8604] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 503.960073][ T8604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.972764][ T8604] usb 2-1: config 0 descriptor?? 00:59:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:55 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:55 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) 00:59:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 00:59:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:55 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 504.298542][ T9741] usb 2-1: USB disconnect, device number 70 00:59:55 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dyn']) 00:59:55 executing program 0: socket(0x28, 0x0, 0x8) 00:59:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:55 executing program 4: socketpair(0x1e, 0x0, 0xffff, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 00:59:55 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x20080, 0x0) 00:59:55 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 504.796100][ T9741] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 505.052089][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 505.183558][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 505.191705][ T9741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.222580][ T9741] usb 2-1: config 0 has no interface number 0 [ 505.230440][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 505.251454][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 505.280176][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 505.300198][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.319567][ T9741] usb 2-1: config 0 descriptor?? 00:59:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 00:59:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 00:59:56 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb6f, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:59:56 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 505.591711][ T9741] usb 2-1: USB disconnect, device number 71 00:59:56 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 00:59:56 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) 00:59:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}]}, 0x1c}}, 0x0) 00:59:56 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:56 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) dup(r0) 00:59:56 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4001, 0x0) [ 506.074034][ T9795] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 506.313642][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 506.433119][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 506.441553][ T9795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.454402][ T9795] usb 2-1: config 0 has no interface number 0 [ 506.469159][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 506.493324][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 506.516668][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 506.555540][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.586599][ T9795] usb 2-1: config 0 descriptor?? 00:59:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}]}, 0x1c}}, 0x0) 00:59:57 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[]) 00:59:57 executing program 0: syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x9, 0x40) 00:59:57 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) lseek(r0, 0x0, 0x0) 00:59:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 506.853111][ T9811] usb 2-1: USB disconnect, device number 72 [ 506.971878][T15961] kAFS: No cell specified 00:59:57 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x0) 00:59:57 executing program 4: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b00)) 00:59:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r2}]}, 0x1c}}, 0x0) 00:59:57 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[]) 00:59:58 executing program 0: syz_mount_image$qnx6(&(0x7f0000000100)='qnx6\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40040, &(0x7f00000018c0)) [ 507.239887][T15976] kAFS: No cell specified 00:59:58 executing program 4: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', 0x0, 0x0, 0x3, &(0x7f0000000900)=[{&(0x7f0000000480)="399460ae456ae93e", 0x8, 0x100000001}, {&(0x7f00000004c0)="c518128a9bc78f51bdc9092f23fccecc637f0ac10fd1880e6db3006bcbf14c904c1c5efa0af9a224e193c9f51fc578a2795340bc59848dbc18622a53055862a69ade5dcae2dbfd207565a8872cb30ace1a496c82ef623cb07b1ab912bf3afe4b", 0x60, 0x6}, {0x0}], 0x20, 0x0) [ 507.409187][T15981] loop4: detected capacity change from 264192 to 0 [ 507.442948][ T9811] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 507.527931][T15981] loop4: detected capacity change from 264192 to 0 [ 507.704161][ T9811] usb 2-1: Using ep0 maxpacket: 8 [ 507.823325][ T9811] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 507.834050][ T9811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.844927][ T9811] usb 2-1: config 0 has no interface number 0 [ 507.851170][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 507.862866][ T9811] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 507.878300][ T9811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 507.888218][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.899737][ T9811] usb 2-1: config 0 descriptor?? 00:59:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 00:59:59 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[]) 00:59:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:59 executing program 0: getgroups(0x1, &(0x7f00000007c0)=[0x0]) 00:59:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0}}, 0x0) 00:59:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 508.220007][ T9811] usb 2-1: USB disconnect, device number 73 [ 508.320099][T16012] kAFS: No cell specified 00:59:59 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x6, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) fsmount(0xffffffffffffffff, 0x0, 0xf0) socket$packet(0x11, 0x0, 0x300) 00:59:59 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 00:59:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 00:59:59 executing program 4: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000001640)=ANY=[]) 00:59:59 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000480)='9', 0x1, 0x100000001}, {&(0x7f00000004c0)="c5", 0x1}, {&(0x7f00000005c0)='i', 0x1, 0x6d9a}, {&(0x7f0000000680)='S', 0x1}], 0x0, 0x0) [ 508.596469][T16030] kAFS: No cell specified 00:59:59 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) [ 508.700507][T16034] kAFS: unparsable volume name [ 508.719872][T16037] loop0: detected capacity change from 264192 to 0 [ 508.732947][ T9741] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 508.793648][T16043] kAFS: No cell specified [ 508.856670][T16034] kAFS: unparsable volume name [ 508.908751][T16037] loop0: detected capacity change from 264192 to 0 [ 509.002794][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 509.141626][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 509.150010][ T9741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.171792][ T9741] usb 2-1: config 0 has no interface number 0 [ 509.179850][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 509.205459][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 509.229813][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 509.241937][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.265197][ T9741] usb 2-1: config 0 descriptor?? 01:00:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:00 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 01:00:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 01:00:00 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) fsmount(0xffffffffffffffff, 0x1, 0x0) 01:00:00 executing program 0: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[]) 01:00:00 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) [ 509.648458][ T9795] usb 2-1: USB disconnect, device number 74 [ 509.751581][T16074] kAFS: No cell specified [ 509.767300][T16077] kAFS: No cell specified [ 509.785464][T16077] kAFS: No cell specified 01:00:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 01:00:00 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 01:00:00 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=ope']) 01:00:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) 01:00:00 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 01:00:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) [ 510.061777][T16088] afs: Bad value for 'flock' [ 510.162775][ T9795] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 510.412725][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 510.533178][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 510.541347][ T9795] usb 2-1: config 0 has no interface number 0 [ 510.559490][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 510.592605][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 510.620270][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.647390][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 510.667089][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.690213][ T9795] usb 2-1: config 0 descriptor?? [ 510.967137][ T9741] usb 2-1: USB disconnect, device number 75 01:00:02 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001040)={{0x0, 0x1ff, 0xfffffffffffffff7, 0xfff, 0x0, 0x2, 0x4, 0x0, 0x326, 0x0, 0x0, 0x1}}) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002340)='devlink\x00') clone(0x2000000, &(0x7f0000002480)="b9cb0b34431f88f0e0d9cf53d7cc144b9db84180ee205b5f95f0d26a23004f298fe7253c6180fe19f0dafa92e6a400ccebd0a3f0a14395716f9e01e4371f7fe212bdf1dcc6aff2dc0dea18debc3ed36ad3ce73bf8294908c202980d32788b9a35aece93c50bfa89fcfa1eef6cb8704f3b88b2a83d594a97f9460b16c646a328f81ebe12b3d074542d56313ea52e95896b6b08dbd453e0f41857afbe54cd4588098278008a0a0163333d91f8a69a7097260e15f6289a0a8a2e7e2fb9c06d2ba42f53efee8c951917f4a6979990c695449e762922514f8894aa832972a3d80b9309fb1bc2c3cd0b0429afa8b1041509924eed4c96d707379655b53696cc238a2fdd35b095740b13eac1d2c386b9ac03bb83af1b5c3b843288e9e75df827f6cd2aeb946b02886fb7ee991721b57fbfd8674b07bd956548f3dc4e54723fb13b53691497439086852e22c34db207498cdf555586477457eed4f129687894d5dc2dee9c1520edff0d452426dc2b3ad6aa8e40051c4a98c53adafc986d5521f7b8267442e9ec0d814c90b2f4b27b588da47d4bfa5e0cafe608473320f86dc136fc9943ef9ae91d8c4e8544e6a64abcaf58c3d663763daa19caf108a41609b8e5f4b629d4f4a6db889d0e651a920dc36706c66b7da9f9db9e4d02c26d23ac20a2ffa21d1496f575bed6984ebefa3750ea7232da374ee2bbfc4cc260c2f42e9b2ed3ea30126f92088e04e28c7a5adfed54638f29b850600e385b2917a5b21b5baa0f18f22edf1a30abdb7bba667eac89890046984f8992b8aeb3238cadeacf55a9795bad6586bc1d805a98ae9276cdbd4c1f1515d57b227191f7f02ac529e4933f12feeae206398bb6507de2feb65db6119710e7ba103d3fcff4c33e7323f2dd7aebad273e776000b0d51c6a0a3816838c47b4f5315d28e621caa3b7bce4c0ceca85a2ae77d97bc91ae5360801c286599524234670c6d6e136c54747577ea37d353af2f985320a02a60454fe02c2f566616633e1a2879cd434d32507ab15a8c41a0a3fbe7a2bbcbdac12a13018ae52515f48891d882d72d9c9afdab0966eb89c2e300a3c6cbf5f6cc5fdbff59e54fcd525af6b003e3855ba92989f00faaa14905a7017ae8d984efc9341731dce4d5bbc123f43a77848017b802460164d8ff14061849340835b4c6685a9c75d2c46abd36ab30baa9aa21d8324b7f0ee53d90d89e0d64ef25b8610968ca5e2b1fd88b0ae4f42de729a0d52651fe8d967da5cbe75acdeb1fc8c2522b5af77e36c55a4e9728d4352e83efc1cd559b4a15abe7c77c7ceefa0d99c84edaf6b4fed77056eec1a4ba9daf824cf4dc3b7ffe65f708a675c25c302cf5ba1a4c5ee8bf97e1382b98a27b37af805cfdadf3d7100ed5b67e4fd1e97ea86db8e852e20c59629ba267e367887463a1c86dba2c5e345c238866f894de88c68a8713b0f184ee4b156e12b57f4e2066da29a696927b706540b980de2d9ebd93004d503ee47a0fda993086d7ba710db85587763dd49a603e0417a6e0ebbc45c684e6dbdb04228632f1074e0dbc2946eda9f661738b3480a8a515ae1daa754f32e0a2cbaab9807447b4933b661fd600ff752cb8448f1a5cd887418e45aad5834fd51a43dfe409b934fd676d63775f36701762eddc178d2f4814714fa92fbe8e0b87efb199d3fe25343d17c29c3e6e4057644bef67fa76b6aa290ea022b2d3a94cd0e6e4af42425e2d515ce3078e336aabcef98d174bab1ba6ca216502475c4eab97f75c08ba459eb0b2561fb7134d38d1bd3f474a6e8d48d430e8ae548bc2b35ce03985fe697fbfb4784bed004bd713f0d3f7f5271d46f964c300a6e5092e7eb8b9fbcad0f7d8cb51927010e7f590dcd8bb791b938b17ca898cf4bdc8775e6df55a115350fffead62c8e93cbbd4734d1e485c13787501cd9098dd9110f0bccd0db89eec2dd36634d98ef5e30178a026521665fe75d3437084f155dc400d2051e8d9f91c8178a64b39bd5dfc4f699e10fad45531fbe22b0a1d0dfd7c747cc0933fa6cc295536b303020d7e2e8654607837b6a9c8e3e5520d0b71cef060aaa25d6510c555573258a1d683b4188416e0bbd2eca60d36aecfd8dcd31c443dd57a53336e2025e70fcae1e00118b88ed77c8bd29a58c5b2a4055a49977ad39ba50e5ad1990b193dff6d64b82a1fa9530e297136a8d515c07e67e5b6bd1fc1b05c7b0309aaee44540fdcddda9cee98486140ddff14b6a9bda808e7a00710c0e2d073384a90a4ccfea0e579662cf3d82551ecc20ebec7cc7faf335ad1eb2ee2d09a5d3ad8a65c0d05fc644de2ffab93115f1122a8375e357fa944cc75930fd3109f353327a067a3e3f0e31e0ab4782d97b11bd8a6705036f01cd9e45050633de70cae6595e0af30361d695dfc255b0a389dc3ae3c350740b48ab75ca818bb9bd8fca49258da815382635999c19ead340f37aaa1d292c80ae5718f31291811fac359992f90ed2f85f13f6704d6434180bc9c0bea6a955bfd3c743f12f55150c1e74c658712c14bf298b1c93a98605a171109e566bf1d897313b4b5188ec7ca425c27b775421c8d855702dd953613a0264fe3c727d102370590ff2a83a7fb02f1dfa5afeb74f671bf630246b999f727c8d32f0944f689d8ee3b8ce8b9aa4edb4763e70448a34743c635fe6ee8d31cd92e2da8ae4e0dd09b832a4bf5c810e2a5909c3fddc9dca4012f2d5774955ee5a3f6c9a17b0defa0bcfb2ffaba6daafe7240a4f51f1133b8c3a135eeca3bac398c1f125b59cdaef2f428a538ebf9f6d9b76cfbf46bd066db2235131bbf91ea9efbbc147923f6a9bdd9f727c5d4de8a177aed422f88937bccae4a828bbdc8ee86146163626a9403e51f2b681d4a8511d3bfb5fd7d304b9037beb133f07842207480d71648c49d3dbb892ed7eabed4ab6751bbc1b3674b768572e0a56c558c9b43df4f583ce28a61e82ac33327dbb9685357defbca37fa95f2271f155ae00b84bfb490c85b308286cdbc2463695d8f5114cac26de28adade01a316eea8f0a1e4c9f72e568d593af1785d03459de425a5f3dd898ba9abb7f8fb14f0930728d065fe7beef2dc1ddcde924dbed7353e159d6fa685c73cdac59e936dbb9b147421999ed6979190b82dcffb84425069499b26db1c5dba709532730afff9240985cdf8a16cc8cc0c171307c510a2de58e83424f9720c5b49ac4a971061bce70ae3de930344129f5e082f04cb039f665c700d1952c4fc6d12c70074b3155549d17a46ab6ddef853c02b6d819877733beb4c205adb1059d4bada1c78be0f0c9231847f72599c60f26c553add3e8f5852359d7fa4ad3da3a9f26c7377916e1c039b2bb2fcaad4147b07b5a190f0ef6494546dd65dd5819cdc2ee24243d1bf54d52ca3f6f0ac2cdbcc53484af86774b7caa4c17f68af0b54550e029b577efeb50622321b3845192d6d52d07dba3001a5efbd8bcfcc67f05b93a2c892d35052b1c11defd80cc4387ab5d080d04f7682a84784cd1e6f74e63a7f95d95b7513c2b941bf511db7ff0a4a0568bea3020f8d2a451ad295b09e320808a9d6f3b708f43dfa53ed471ac8f03badd7579ceb540b90b7a2778edc0543e807be6f3be7c86c398e30971d47a572d657c7df75f269dbbb8d34cb702062dadaedbf909248a3ce8b8efb7c37be569824d2f7b183da51b637d1660f0e96ed46de907b00d0068c8812e30ffe8c05b90ea00513876f5896bcd6394d213d85bc60d191ab5346d94ea223540c978d4bddad97e4a1cb20fdcd00963f93014f5d4167ed8f349ebfcf6b481a2320305cc248fe649037986383814231dde2db9b6e902415f8a44d6570e15016ffd0c90f8f81f8b8b7c3244e609075b51a1ead41edd787a55c40ab5fd1f28c70513826b2e767a23dc7d8d0cad4d316075625e5f710958995f3b11fb69e160020316deb38942b8c25e52586b58605c7cc7339688ab7c04db777879df530580fa7a42cc3112cb39dd479c0ec3f366b0bbda2d8cbbef864032c46edf9537ff26300c51302c4128d2aa6e604d298575846ade3772fa0313163f46e7e4249943b0e9e41b544a311daffe63d98ab049c092bef6e541d17dec9b67cb2cc14fb236eeb06a7b394ccab64b4b391bc18d4df50c1de0ea12df2695b368152bfbd44df0dd992c8c31373a8faa2595ae46e7cfe5ec39a50c09fd50a00eba757fdab0ff5f19e45cd0994d84643a59f1dad46dd565f46e46b6da726e5101ed5e69a05681f1fe44ae2be159eed19b253f8a58aa3c746a9571412b78e61f3bbf74bc9742748d2891d2989401e3d2ac3f6e8c42fd9e79fbcf0debc3db8a0848720c7aeb85a06d8b688ea6312754fef3a0387f857ed6cb201562c724a338513ee1c6a521b6252f8254c7df4f583be03ae08940490fb630d1ca81b98a9b26245963350bdf88aa04c964100d1be4a68216c10ccc51b2d9d9fccc540b94321a855c307a4add392cd0842b91f067164bd51a00e4492420665ff2a793b7224b52f853ea173224e6077addc50d98bd8ec4802800879044398959544abf9d8d1a961efd932d55bb575088771a6aa4e4da58e19a0f0bbde6d04a6b1c8d793ee471a94a614364a70f41f2cf9839af102faf30392a80376b2ba033520b623dee30e72e0540742889764590e0f61cd77456f7ad760574c2fe42df7a98b0466ff0525afaf6140bb9a362a9fbb37b6bbc1a7cccc39983c3ee3ecfc18ea7b8ed1a798a4ff4cd6949743325729dff923528e5224329a2850b5f53a1cf03569007c7262eb06194799a2b9b4bb2f12632e4e1507d03ddeef6a7c58d7737f8f67190a7a695c760ab6d8e3986abb4b86ac4770f104ca70d4462a3cc791ec0afed8c6e591ebc46ac8c07de6fb3de5c1f9c800f08d3d363642592c25a645baa6b9be5ac0c7092c0a1dabf7ee87bb4dd7d4a43386613d7be38460d516ca805f517e3476dffbc7662c6f459553bdcfda907391b86f8b28bbf27e495aa6f36345d370edd7913b1ef4644f3914fbc234f699110fb27ee6f157b76c82ae6227f61363b8d1aab18e161a797ac207af49daf422e947d0d27094dd6bf254005e69e01481ff011b212968cdb2dd586e23d8e9541c38cfc67090bc369119fe2a8d3ccdd61e6f8950386546e1862655209c7f696265c2bf862906b3812831dc3d8266e88ea2cfcf530d0b52bf70c2650f312a1132795746f0036d8ddeab6545ba60dbef5728fe870374e33c375083c262948ee3f33f0224", &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)="1f187c5c7f041d2eea4f6109731d66072bee286e70936747512c8c22aa8c7baa2cbb6bad7eae1430702e5113d72c1988ab0b59811d19cc2bfe99ef6dd995ab559b9a958268a83704e0b6d983e5de984d3a7bee2ceb2a74cf4b53c199961a0d9756848ad000b8cd11874bf5a7b47d828afc5177227bdc714361ecba56a853d2a4a529ab8819cb695289c1725a3fd7a88e95279870f8c1321196e82f2c") 01:00:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:02 executing program 4: syz_mount_image$afs(&(0x7f0000000400)='afs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:00:02 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=ope']) 01:00:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) 01:00:02 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 511.599444][T16119] afs: Bad value for 'flock' 01:00:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0}, 0x78) 01:00:02 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=ope']) 01:00:02 executing program 4: socket$unix(0x1, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 01:00:02 executing program 0: r0 = getpid() r1 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000240)) 01:00:02 executing program 5: getresuid(&(0x7f0000000800), 0x0, 0x0) [ 511.880656][T16139] afs: Bad value for 'flock' 01:00:02 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 01:00:02 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs']) [ 511.932654][ T9795] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 512.116961][T16150] kAFS: No cell specified [ 512.182468][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 512.303042][ T9795] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 512.311209][ T9795] usb 2-1: config 0 has no interface number 0 [ 512.328789][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 512.353049][ T9795] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 512.371662][ T9795] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 512.385727][ T9795] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 512.402690][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.426022][ T9795] usb 2-1: config 0 descriptor?? [ 512.679853][ T7] usb 2-1: USB disconnect, device number 76 01:00:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:03 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$afs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:00:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:00:03 executing program 4: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$afs(&(0x7f0000000400)='afs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000a80)) 01:00:03 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs']) 01:00:03 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:00:04 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) 01:00:04 executing program 4: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) [ 513.345873][T16179] kAFS: No cell specified 01:00:04 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x22082, 0x0) 01:00:04 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs']) 01:00:04 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x3c9300, 0x0) readahead(r0, 0x0, 0x0) 01:00:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) [ 513.617985][T16194] kAFS: No cell specified [ 513.682389][ T9320] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 513.936879][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 514.052610][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 514.060751][ T9320] usb 2-1: config 0 has no interface number 0 [ 514.093138][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 514.114069][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 514.137274][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 514.152776][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 514.161857][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.175524][ T9320] usb 2-1: config 0 descriptor?? [ 514.419815][ T9320] usb 2-1: USB disconnect, device number 77 01:00:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905830300"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:05 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,d']) 01:00:05 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x10000, 0x0) 01:00:05 executing program 4: sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) 01:00:05 executing program 0: syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x1402) 01:00:05 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:00:05 executing program 5: socket(0x0, 0x14, 0x0) [ 515.065724][T16232] afs: Unknown parameter 'd' 01:00:05 executing program 4: clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)="1f") 01:00:05 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,d']) 01:00:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 01:00:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}}, 0x4008011) [ 515.322284][ T9320] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 515.327292][T16247] afs: Unknown parameter 'd' 01:00:06 executing program 0: bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) [ 515.572389][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 515.702334][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 515.711317][ T9320] usb 2-1: config 0 has no interface number 0 [ 515.720333][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 515.733543][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.746592][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 515.761371][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.776482][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 515.787559][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.799996][ T9320] usb 2-1: config 0 descriptor?? [ 515.864629][ T9320] xpad: probe of 2-1:0.65 failed with error -5 [ 516.067696][ T9795] usb 2-1: USB disconnect, device number 78 01:00:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905830300"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:07 executing program 2: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0xdc238336ff7909a7) 01:00:07 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,d']) 01:00:07 executing program 5: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:00:07 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) readahead(r0, 0x0, 0x0) 01:00:07 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x189280, 0x0) [ 516.654369][T16279] afs: Unknown parameter 'd' 01:00:07 executing program 2: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 01:00:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) 01:00:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) 01:00:07 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10d000, 0x0) 01:00:07 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dy']) 01:00:07 executing program 5: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) [ 517.013897][T16302] afs: Unknown parameter 'dy' [ 517.062195][ T9784] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 517.302288][ T9784] usb 2-1: Using ep0 maxpacket: 8 [ 517.422500][ T9784] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 517.430656][ T9784] usb 2-1: config 0 has no interface number 0 [ 517.449440][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.471473][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.495003][ T9784] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 517.511106][ T9784] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.535175][ T9784] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 517.550783][ T9784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.572968][ T9784] usb 2-1: config 0 descriptor?? [ 517.620391][ T9784] xpad: probe of 2-1:0.65 failed with error -5 [ 517.822530][ T9320] usb 2-1: USB disconnect, device number 79 01:00:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905830300"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}}, 0x0) 01:00:09 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)='}.,%+\x00', 0x6) 01:00:09 executing program 2: ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000005c0)={{}, "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"}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000580)) 01:00:09 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dy']) 01:00:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 518.454642][T16337] afs: Unknown parameter 'dy' 01:00:09 executing program 5: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 01:00:09 executing program 0: r0 = getpid() kcmp(r0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:00:09 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 01:00:09 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='flock=openafs,dy']) 01:00:09 executing program 4: keyctl$reject(0x13, 0x0, 0x0, 0x7, 0xfffffffffffffffa) 01:00:09 executing program 5: socket(0x22, 0x0, 0xa65) [ 518.714017][T16349] afs: Unknown parameter 'dy' [ 518.852180][ T9320] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 519.112028][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 519.232261][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 519.240673][ T9320] usb 2-1: config 0 has no interface number 0 [ 519.248379][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 519.278602][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 519.311995][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 519.334295][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.348292][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 519.358006][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.369544][ T9320] usb 2-1: config 0 descriptor?? [ 519.414966][ T9320] xpad: probe of 2-1:0.65 failed with error -5 [ 519.618674][ T9320] usb 2-1: USB disconnect, device number 80 01:00:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sched_getaffinity(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) 01:00:10 executing program 0: read$hiddev(0xffffffffffffffff, 0x0, 0x0) 01:00:10 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/sequencer\x00', 0x0, 0x0) 01:00:10 executing program 3: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000640)="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", 0xe3e, 0x21c3}], 0x0, 0x0) 01:00:10 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) [ 520.217840][T16382] loop3: detected capacity change from 33 to 0 01:00:11 executing program 2: syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x208440) 01:00:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) [ 520.312654][T16382] loop3: detected capacity change from 33 to 0 01:00:11 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000180)='\x00', 0x1) 01:00:11 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 01:00:11 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f000000ed00)='/dev/vcs\x00', 0x0, 0x0) 01:00:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) memfd_create(&(0x7f0000000000)='@\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x1000000}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050300c806023e0001fb22a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) [ 520.602368][ T9320] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 520.862223][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 520.992419][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 521.001216][ T9320] usb 2-1: config 0 has no interface number 0 [ 521.034350][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 521.077559][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.108327][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 521.137173][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 521.155312][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.173453][ T9320] usb 2-1: config 0 descriptor?? [ 521.426304][ T9320] usb 2-1: USB disconnect, device number 81 [ 521.432614][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 521.432672][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 01:00:12 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 01:00:12 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:00:12 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000000), 0x0, 0x0) 01:00:12 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}, {0x0}], 0x2, 0x9, 0x0) 01:00:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sched_getaffinity(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) 01:00:12 executing program 3: openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0xe5, &(0x7f0000000200)=""/229, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) 01:00:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000980)={0x12, 0xfffffffffffffde4, 0xfa00, {0x0}}, 0x18) 01:00:12 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000540)) 01:00:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x0) [ 522.552379][ T9741] usb 2-1: new high-speed USB device number 82 using dummy_hcd 01:00:13 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0) 01:00:13 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x701c0) [ 522.793081][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 522.914402][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 522.951820][ T9741] usb 2-1: config 0 has no interface number 0 [ 523.138270][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.151771][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.171592][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.201603][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 523.211135][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.254057][ T9741] usb 2-1: config 0 descriptor?? [ 523.497380][ T9320] usb 2-1: USB disconnect, device number 82 [ 523.511738][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 01:00:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 01:00:14 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:00:14 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080d4}, 0x800c000) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x420100, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400800c}, 0x4082) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000280)='\n', 0x1}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1140000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3aad}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r1 = syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0x0, 0x2180) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0xe58c8df7242a6a90, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x4, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0xf8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "f4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x2, 0x65}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x3f, [0x5, 0x20, 0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x50, 0x1, 0x0, 0x3b}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1d, 0x9}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x30, 0x1, 0x6, 0x8, 0x2}, 0x27, &(0x7f00000005c0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe0, 0x6, 0xff, 0xfff9, 0x6a}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3c1b678b2ce8d742a69fbff8606ab94a"}]}, 0xa, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x11, &(0x7f0000000640)=@string={0x11, 0x3, "0afb8ed37608691d27200e906151a2"}}, {0xa7, &(0x7f0000000680)=@string={0xa7, 0x3, "326e48ee946d2da850bf9ce27045be14544ffb66aabd01f9a5560be8ff33da596db12ce3ea86f8d88add0012ce176a0058850aa82ed1fbaf434848b953798232d12fd7e2561e5c2399fff2b4f5f09663d1ca46be7b4ca34dec9253649ce669e30746efac9a21ceff93a6badbdfb647e9cd796f1c9c1ff25dbb0ae1349c0ff1b2a1dd22ffd91eff620790f85d11192792d5499f56f4d66a40ddb7174511da77eecc16e6e33f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x459}}, {0x18, &(0x7f0000000780)=@string={0x18, 0x3, "31dc1b62492d0b6454612439424c2e12f5eb0a5939a9"}}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0xa6, &(0x7f0000000840)=@string={0xa6, 0x3, "2eeb6c16115d110f09c1d3463af5392fdd15c2092bc8a00e7b6c58b973069655f4c84afa937650ab7891dfd4bc1f6fe14049e47bdd6e7668030f6c86ac3ccf575a1d976f4fd9491fd5366ae090182e8ad1704e101f8eb91d13305e6379f1ecd03f54210b29c496389afc1a40cbbb452b8062c82cb757602117f9a5f69334bb1876690c3adb906afa3b6b83adb1e06f1ac1bc5c3791b0c38a476881775c5b7343b3ef851b"}}, {0x48, &(0x7f0000000900)=@string={0x48, 0x3, "7a4794ce02672cf8eb66a899f14e0e30f8156ac8c82566cb372fc0902938c85a2fbabc24ee5e63f42f5e35c18607f22e6adfea7da243ff8b84095729267923cca66aff05adac"}}, {0x0, 0x0}, {0xe3, &(0x7f00000009c0)=@string={0xe3, 0x3, "a21c303c8f1eed86ef0554cfe3de486f51a4c95857757da0fa7dfbd7e498b1265136830ca5e57edf304cd63070cc0f9126b484a8c25e9f188c47242f672ef1da272f9ca150883879e90a16c727a0f1ddcb6a5124a75683412c51d3ef75e01e6a146b719b3bfd533997176643fa14422c7be3f145564afc50dd2473da80e3b56db94ded175b57441e4a147af92109ad9be729988de3bd2888867ede578c8ecf1f941ac47660b169f75860b056300243602ea34441bd220b223ad546d7fea8e9148a394770e0892cd209650ba182476c42123cfd9d11c4bdc00d99016ee1500e6b09"}}]}) syz_open_dev$usbmon(&(0x7f0000000b80)='/dev/usbmon#\x00', 0x2, 0x100) 01:00:14 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:00:14 executing program 5: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11) 01:00:14 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') 01:00:14 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xc001, 0x0) 01:00:14 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0) 01:00:15 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x21c3}], 0x0, 0x0) 01:00:15 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f000000edc0)='/dev/ubi_ctrl\x00', 0x24000, 0x0) 01:00:15 executing program 3: syz_open_dev$evdev(&(0x7f0000001800)='/dev/input/event#\x00', 0x0, 0x4102) 01:00:15 executing program 5: syz_genetlink_get_family_id$devlink(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000003600)='devlink\x00') [ 524.366796][T16517] loop4: detected capacity change from 33 to 0 [ 524.401633][ T9320] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 524.441887][ T9841] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 524.480756][T16517] loop4: detected capacity change from 33 to 0 [ 524.701952][ T9841] usb 2-1: Using ep0 maxpacket: 8 [ 524.822467][ T9841] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 524.830605][ T9841] usb 2-1: config 0 has no interface number 0 [ 524.842070][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.855111][ T9841] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.868962][ T9320] usb 3-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 80 [ 524.879862][ T9841] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.896519][ T9320] usb 3-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 1024 [ 524.908689][ T9841] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 524.919707][ T9320] usb 3-1: config 1 interface 0 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.934887][ T9841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.944896][ T9320] usb 3-1: config 1 interface 0 has no altsetting 0 [ 524.957829][ T9841] usb 2-1: config 0 descriptor?? [ 525.021936][ T9320] usb 3-1: language id specifier not provided by device, defaulting to English [ 525.161911][ T9320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.178910][ T9320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.204805][ T9320] usb 3-1: Product: 渲涔꠭뽐䕰ᒾ佔曻붪更嚥㏿姚녭蛪񎆊ሀ៎j蕘ꠊ턮꿻䡃륈祓㊂⿑Ṗ⍜ﾙ듲掖쫑빆䱻䶣鋬摓䘇곯↚ￎꚓ뛟种ᱯᾜ已઻㓡ྜ닱Ｂộ拿逇巸ᤑ鈧䧕嚟훴䁪럝䔗ᛌ [ 525.231053][ T9320] usb 3-1: Manufacturer: ﬊펎ࡶᵩ‧逎兡 [ 525.246077][ T9320] usb 3-1: SerialNumber: љ [ 525.252636][ T9811] usb 2-1: USB disconnect, device number 83 [ 525.261516][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 525.292709][T16503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 525.300657][T16503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 525.611986][ T9320] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 525.633682][ T9320] usb 3-1: USB disconnect, device number 18 01:00:16 executing program 3: syz_mount_image$qnx6(&(0x7f0000000000)='qnx6\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1001000, &(0x7f0000000380)) 01:00:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x0) 01:00:16 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x0, 0x0) 01:00:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:00:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000001640)=""/149) 01:00:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) 01:00:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 01:00:16 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000240)='}.,%+\x00', 0x6) 01:00:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x16, 0x0, 0x0}) 01:00:17 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 01:00:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:00:17 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x61c400, 0x0) 01:00:17 executing program 2: syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0) 01:00:17 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000000380)) 01:00:17 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"ec178ede773a293ffead3efb3564e79d25814f82073eddc682a08e3f4edc"}) 01:00:17 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 01:00:17 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x0, 0x7}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4300, 0x0) [ 526.561429][ T9741] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 526.821219][ T9741] usb 2-1: Using ep0 maxpacket: 8 [ 526.941772][ T9741] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 526.949902][ T9741] usb 2-1: config 0 has no interface number 0 [ 526.962452][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 526.975658][ T9741] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 526.988551][ T9741] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 527.004221][ T9741] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 527.016386][ T9741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.028477][ T9741] usb 2-1: config 0 descriptor?? [ 527.282276][ T9741] usb 2-1: USB disconnect, device number 84 [ 527.291320][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 527.299599][ C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 01:00:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) 01:00:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000005c0)=""/111) 01:00:18 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x101041) 01:00:18 executing program 2: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 01:00:18 executing program 5: pidfd_open(0xffffffffffffffff, 0x0) 01:00:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:00:18 executing program 3: syz_io_uring_setup(0x4da7, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 01:00:18 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/asound/seq/clients\x00', 0x0, 0x0) 01:00:18 executing program 0: io_uring_setup(0x1bde, &(0x7f0000000100)={0x0, 0x5861, 0x18}) 01:00:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:00:18 executing program 2: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000080)) 01:00:18 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 528.361290][ T9320] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 528.636828][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 528.771631][ T9320] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 528.779770][ T9320] usb 2-1: config 0 has no interface number 0 [ 528.797392][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 528.819228][ T9320] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.840194][ T9320] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 528.856924][ T9320] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 528.866674][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.891947][ T9320] usb 2-1: config 0 descriptor?? [ 529.140318][ T9811] usb 2-1: USB disconnect, device number 85 [ 529.151308][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 01:00:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x8864, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @random="0b01000000c4", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @broadcast, @private0}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d810009050f1f0100000000090583030091"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) 01:00:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 01:00:20 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) 01:00:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:00:20 executing program 3: syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x80000000, 0x0) 01:00:20 executing program 4: syz_io_uring_complete(0x0) syz_io_uring_setup(0x650b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x9b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 01:00:20 executing program 3: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 01:00:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={0x0, &(0x7f0000001800)=""/143, 0x0, 0x8f}, 0x20) 01:00:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16}]}, 0x18}}, 0x0) 01:00:20 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000002440), 0x8) 01:00:20 executing program 0: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x404600, 0x0) 01:00:20 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) [ 530.101354][ T9811] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 530.351310][ T9811] usb 2-1: Using ep0 maxpacket: 8 [ 530.481193][ T9811] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 530.489336][ T9811] usb 2-1: config 0 has no interface number 0 [ 530.511088][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 530.531180][ T9811] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.542444][ T9811] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.578795][ T9811] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 530.588074][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.599340][ T9811] usb 2-1: config 0 descriptor?? [ 530.856014][ T9784] usb 2-1: USB disconnect, device number 86 [ 530.871113][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 01:00:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) fallocate(r0, 0xd, 0x0, 0x2) 01:00:22 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) 01:00:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) 01:00:22 executing program 3: syz_io_uring_setup(0x650b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 01:00:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/150, 0x96}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/43, 0x2b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/110, 0x6e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) r6 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400001803c1, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 01:00:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:00:22 executing program 4: write$input_event(0xffffffffffffffff, 0x0, 0x0) 01:00:22 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') waitid(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)) 01:00:22 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 01:00:22 executing program 3: syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='attr/current\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840)='NLBL_CALIPSO\x00') futimesat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x0) 01:00:22 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./'], 0x191) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 01:00:22 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x2c2, 0x0) readlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=""/108, 0x6c) 01:00:22 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/66, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x11}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00587) shutdown(r1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000200), 0x8) r3 = dup(r2) shutdown(r3, 0x0) 01:00:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/31, 0x1f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000001c00)="b426652889b178ebce91f988753e32ee65525659197452117a5d2e962fc3608386fdb450862af17c3dcaf2915a4dd93bd6511cbc9c8eaba240e3552a13f588442d8d86f43f6698bab04a9dd0503a28ee335547ff56d057ee9bd5377565bf8d35f5dff40081979e93c4cbbe6a0c73313e0797c044a695f619908341e1988996ddd4c642f8320484605a4a2a081a9b907cc1d63fc29d83b86a44395d7a35288ca69487fc6b50518510c94174ef5838474a0d8747a8b8f4adfcecb58315a07b4cf827011a8fe65afa7a30a2527acde3cfee5907eb37cb922de747cf6acf7a5f375e5807d1145b6a7c", 0xfec0}], 0x1) shutdown(r4, 0x0) execve(0x0, 0x0, 0x0) 01:00:22 executing program 4: syz_emit_ethernet(0x233, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd61c68fdd01fd210000000000000000000000000000000001"], 0x0) 01:00:22 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ptmx\x00', 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 01:00:23 executing program 5: setgroups(0x5, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) 01:00:23 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x20, 0xa6}, {0x6}]}, 0x10) 01:00:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netstat\x00') 01:00:23 executing program 3: setgroups(0x37, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0]) setreuid(0xffffffffffffffff, 0x0) 01:00:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x25, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001600)=""/4103, 0x1007}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/222, 0xde}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r3, 0x0) 01:00:23 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fcntl$lock(r0, 0xc, &(0x7f0000000000)) 01:00:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/104, 0x68}, {0x0}, {0x0}], 0x3}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001480)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) 01:00:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_create1(0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 532.775923][ T36] audit: type=1326 audit(1609462823.550:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16832 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541a, 0x0) 01:00:23 executing program 3: pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r0, &(0x7f0000000940)={0x7}, 0x7) 01:00:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000046c0)=""/4096, 0x1000}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)=""/4093, 0xffd}, {0x0}, {0x0}, {0x0}, {0x0}], 0x33}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$unix(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="000200bc"], 0x10) shutdown(r3, 0x0) 01:00:23 executing program 1: syz_emit_ethernet(0x7fffffffffffffff, &(0x7f0000000280)={@empty, @empty, @val, {@generic={0x0, "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"}}}, 0x0) 01:00:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000280)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/243, 0xf3}], 0x1}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="a9c3936d6ee888a2fff1dec76466cce89de782d2bef3928a50e1a8837889ff725a605aa7139b10ee8edae1428549a53ac722e62c67eb746d1739a7375040ab87fdc41f903e762c8a8b8b0a23e57e03066b343f1f2365e5732d90fc2716ef6f8a3de94b65c2243e662a4a201a8f908809dfef527a5ea60a4b974b66e1087dc2eb242ff47c2e9de07c04c51728833ffcbe", 0xffffff5a, 0x105, &(0x7f0000000000)={0xfffffffffffffea3, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) execve(0x0, 0x0, 0x0) 01:00:23 executing program 1: getpid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 533.247573][ T36] audit: type=1326 audit(1609462824.010:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) 01:00:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5429, 0x0) [ 533.603358][ T36] audit: type=1326 audit(1609462824.380:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16847 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541a, &(0x7f0000001980)) 01:00:24 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 01:00:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xb2, 0x0, 0x0, 0x800e0053f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/72, 0x48}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbfa8, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/227, 0xe3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 01:00:24 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 01:00:24 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {r0, r1+10000000}}, &(0x7f0000000280)) 01:00:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ptmx\x00', 0x2a503, 0x0) 01:00:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/194) [ 534.064964][ T36] audit: type=1326 audit(1609462824.840:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:24 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 01:00:24 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_create1(0x0) sched_setattr(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 01:00:24 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 01:00:24 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000280)={@empty=[0x5]}, 0x0) 01:00:25 executing program 5: pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLERRORu(r0, &(0x7f0000000940)=ANY=[], 0x10) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14}, 0xff62) 01:00:25 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='[\x9d\\--*!-\x02&)-%!{#,\xff\x00', r0) [ 534.336056][ T36] audit: type=1326 audit(1609462825.110:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16924 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:25 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 01:00:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x7, 0xfffffffc}]}, 0x10) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x3ffe0, 0x0) 01:00:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/49, 0x31}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002300)="d3d6c628dfa73f9e91ebf5f1fcb8ac6601fcc36a96682491f4e1cf2913003bb6b3a06ea3eae3590876971fba7382c80dc616cc74733312b23ae47db214a813cec36e84012f8c6562eef5bc8b84a2f753ea8c894af4c958236eea55abcf399e150291b5c3d40ca9decd099c946b333e168979b7102950148e8ca2e02edd6e71fe6a30796c96b93c45bd226f84e496c3469be04f4b93c619f7029a6104a0f42d9fa04e8ce5424fa24adc567a951a6371a92a79d21e69becadc48aa", 0xba}, {&(0x7f00000001c0)="f6b4d690f90c889ffc32474d4811144c90c24846934999644803000000702907e229120c1f7c5d3bd21511486fc7caed049b9eab907d7443b7c23cdb854bed9af17da88b7965573f506529bf9bce17c9fcab4cb699e6edfde5fd060356fadef29c68b2df0b56f5f90449811583ce462f36b7488b0875a9c9ef7477cee7f6b0f3a67e329d631a224f10e70d8d758c5cb50c0f18f28ce0a62a47ae5d8a9bf06bcbeb435ca3f1dc92cc5223cb5cb13022aea43e82d086dbd104ac34563387c18cb04a848b3147cb049e948d8d9aa965810c4fef5680", 0xd4}, {&(0x7f00000002c0)="83af2abe9b83858383d4677ad2ba174ba3df8f5d730510391536be133c5a9456a39ba2b45df98ed71f8c370bff314611424b264627fc79be5f5307bd17c393fe87930276", 0x44}, {&(0x7f0000004500)="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", 0x10ab}, {&(0x7f0000000140)="1b0a64e3bc6aac003906ccf6e00354889ee77ad07a5d4de9e060cd8968cd9ad30d3d", 0x22}, {&(0x7f00000006c0)="295b63087aef99e4b734e91e4150b22f63e754f4ad961c82903a14a7e8e1028e78b3346ce2e00a304540bd3af2d028b04df323108e11f72929889466f634b85666b239e843a1617d9b1e51d675387b41eb2df506f0460c91f8d9703692405dcb32b76e6937f584f2637bb0c48499d3460ff53027cbd7acaa2fb04861b71a7b65366ba32def1d6ba329c6136e2969172745d25c36d780d02413a49c95f1ad259b8d918c70ad8ac35b028728e194e47c9956595ffcce6ca81a", 0xb8}, {&(0x7f00000005c0)="26d92a83d528c3d4f1f27c9af046936d53a0d6a57ed05c098644f755d723e3b8d6d5a7d397afbbd1e4877cd88cadc8f149ad21c9c2f9849a484e97331890b3eb2e2692c3cac4c6f8b88c5dded7d154acbbaab92879de524071cc8a771c0b2e50b3fd5872aeb4e942df4293188c71a747ba0fdc20f934b935da607b74fe00b4835202650f1708d8f8748dcb61ff1880e4ca96141aef61523a6f7d2a50579a4eb2514a01f8cd9bd456c1e5a9c5e4c52b6b3fc71c7796726bb4933f854ee409ea44de8f5b78d59842dedf7b39c8cffd0747dde4c9118aebd8", 0xd7}, {&(0x7f0000001480)="56e86fe06645ff287a202474c25e9ca5a596c921336dc5f5e3b34d510281d9f16e988a266ae9c776b4c2eff8405132319dc75b749f41765a3d47354264f22bc5c9b4c310fe2fe5d1eb7a0f8e823d0f5a2e24a81d3193075a210b459279b3ed4fa238b970cbba50038835a908ccdcaa732bbbc44898d649462edbc648af1bba2cc4e8a8e476a6ca1e3d34b6952029cb84be222893cdd7e80f5c11f5018b13e9454cd56858b23114ef6993d71f53af714cf8d532aa1c7ab30ff299b12f04bca53f512312a9008032c0c178320edbe5eb68d135855db0746eba9d965429ff46844c6ece1c1024f3ce0374f6206f03298eca9065f7caf33c96d39a1fe1cf244eb8afd4b2ea08fb31cb13f19506d38f3506033d7e73119e6d89366869962f9d7f5fd3630176adcb67a0e423622342e42560eaa4eb495f4bf344a6cc786d6ac7b471e1fd8f5763acda49bb2ce2d60ae821a04de1d318a7cd69dce50bf247056e859298f8169e78988fe0f13b82d9cefa464ec05cdfeeb81ff516b30b032543ed831193926c0c7777fcbd9d3bdb72e3cb4056ced4acc9aa72ef59ff8b2014c1c6656a88beb0f351441bcb0c1fea23ec2bb49c7eab420a21af19e34ed7ad34389defcdc2236e0daeeb07a8a815e2dfbdc1fd960e7647a8040d7c30f7445b4b791ed0151333a8e12f8c60bdd071b712ba606beab23c8c3ac03aeb073d2cde0d47b4d585c4a211361bde97d82cc448457c5db5db285d5e76460b825aaca8d612a029e99403d2a9268dfa34a3af0f92ec6b57615350c5e09b67f35fd5f385fa08a113402ee62e9c4020822fab1b7beec8e5ca838655697967e41175cb938a4eac988b179ef63550b37eeccc9256062f670a630a2b372ec138d2e65d84c4a488d3db50d438bc59e70559a2e76ccb75fbfc659420b4ae5beee1abb9ed56fbe5701ed6d6f6061f8298bdc8da57c144799aae97fed6bf98ad67ce24e44b75ec18657d9ca018043eb765b2d6dcff1c6c8481b501144763f87ee7b6a684344ed684dc2a8fd97b295af71e2b1faad79a6e2bfbf06ca3e955d3365c3caf07756f19e266b99ece4ab03687a4e5ecf14fda70d003fe61f625227d99d4bb529691a7cac576774a3903f42d4c6f0876c63d431b25dae4ed85155166385806d60269ee404664bcecb2dcaec21fe2f0c05ac1624aeaa5690bcaa10bbe4c2666345d1902463a5dbeec3382325a0854826215dc89bd2891213ccd911bdb75a86252ec7503fac09d5e0489c3dd8f39a56f043a8641a827c8cbb800b0bfdda8a246504ce68e3843e365c3190501b23db2518d8602a982debc7b06f87643e7f29b3f8a32b63dcc36c1a01d1d916eb8af4ce066b3c53cb16ff13478e3eed8601da51ed2cbf2b2286fa9c4a38425dbf6658a5e2ea241d289b2f6c0f5d02f49fd07c0c99d0f04d6258e40bcb6d10d72148429ad80cad2818f040553e4526ac85c7892c69406d59db21e053c9b51c4e845eca783a65a3e3abcaca5333947cf126b74f57415f3f7358776715302bd9b28850f1a889337bf395ff8591f1c579c8fea4e59a22aab61ff8f28f7ec1ee14f66adcf824145cb3545c68e80da1ba20eab90b87e9a8de56f8831933a324b256295ee859b365d868f25128dac09b666dd13a36fd50d62630f7ac6a22f69def92f97ee79e9c3c87ff80109270bc83046a05b6a2ca4966203519634d18a54061e966d7938a6192b56c40d43fc9ecb042749c89d7ae81fc6c33889e13942cd844c1cab314823ffc0ba37bd28236b0f59c339d436e44636171cf93db7fad0cc96ecd64fcc95c489a3f5d04850c03dd7bb8c91a6207b534e91cb40bf99f481a2f3fc56a880c12b68a29322422233d40650e2b4bd672da24e07dba915bf99d7340db4712a09899f141fec8d66618367ddf6ec136f5ee14bc98f08a6d81cc6b1f7ed6707d3178f3345947a86d2cf932759e34403cdff828bd4d8d672000b3c06ca131f963cf800c0f561cb288bae0c7827b76076c9cd478c7239c674d06c774a99bb9314a0328560956724c65a646c0c3a347f05eee314e01d20e2823e3c66e5f8fcb379fa63beae07ac3f8c0fbec6f2c622983a71e2229bf905a15abfcde15aa355c705d80243e9ec594d05e0b0a904fbce340cf953d48e734ba74870010b882f295ec4eb12e936d3bc1ac67c1b7475d7c40d2fbe4267d54ebb5a329d7f12605af54cfb4a556d5cb9025608f12e8b28f986e1d5b7c626dffe3495454ab1ccf8778a76bdaa22f18cd1f149ad33c7b55acd053dfe6e31ca533c2423c3b3f5a1401eaf045e27f4888ecc94628a36dc2119954a5830634ba955c84b6a1738f0d4cfc2aaa82c49b9a705312f17112fadb0703f12e23102b0ed74d5e85801af021f607ae55389fbd9e8cf1fa9f800d4c8c69667f05822ffee8b288b41c92356835c592b1c83e5b2be665625e8562748cdbc41019a0b5e09b2e2593cec1cc8bea3f9f83dec852d29f67e59f87f94c76d4c7aea110933daa947d7504c4f69c7cc83e013e3f5fdcbfa723d9856f343a952970cd4b975c9b92f17b78099d70eb0fa4da6c97cf65b7ba9f6e88101a57f6776991dde64823e1599c43d8c237d3ae0e92b7158ad46a28d07ffe925a0b86c536e6e1ddb513ac44bf48f6928a3edea86652d9882f0b9db8ccb04f553f632f56b14733279fbab41aa7ea347d61f97d421232a5dc40c92a000b0257711f85b6eac3a6cc4da20a55f6593765cf50d0dd82cd0c985e47ef4830d3b8b4f0293c276bf623369fc5767f8c3e8dc24b15e2750d11c9b79bd84cef82b398e22d1bd05c79bf3e9aab63c6f1f51e535493b2efc5b573285d48754203147570973d8ba0814a876cb1b20b09e624ffb7082f192bff46434e49613a6a41ed30d2fa86cb87016c32c38901a4763faecaf0e525ab8387582e5b97c05d06ceec31deec6be2cd8631d6fc1406ceb1431cc5ecb91e186a2ff3f3558f4c0342b871617dcad2ae570821a9193306c26e1529be1db8d5d714700dc547af74d05b0ffaf5ddec53de5beb367a1d9a36f47fee999ce32da440f506492eb26d48c6e48a68b00ebff01d9769fc64fae53574aee6758c7d70575468ea1b95e06653b659763098885022ee656bb0bf4862352e9bbf2f23e05df8c26b7862ab4047388ab5bc51fb7716af045c0b186ad3eb40f07dcfe5b77e3e4ea1d271d008bc8b96c60e59b690b8d3b7b6a450d8a04e2f61499375233f7447e48c11309c4aa952b960604285e28e340a29b8abfc92dfa7bfd04fec71dc2985733ae81946c478992bb37cb49acab156477430f60be50a1fa7d9fdccbf876004702aa49a021c068ba7d5971425ac3dc2489611b6a6c8bb04205ca6706305eee2dfa7a4f384f9d71a6136124ad4c0d1e73e450b4f05374614eb0c2ce6a2ec6145e5f14f36faeb447a21f65a2799290b7b3dbe98eb8db2c0905380eac5e3f4f3e78227e135789f1c106009dec7c6e57b1fca52eb2e10f277ce1b77529e25799f1aea61bd1dc20398c08140cc548bdf73359d5be1b239b9ee67d6e33ec0544c2ff488a881ae2d5b10b02c1a1a8ddaf81eff4dd468cd3576d50a3da12bf4a2fdf688248884372de538ac774081c448dbf4747120b38d26bf7149182fdfec7103a4d959ec9eb5bdc64a7b700ccfc2a00ace56a1438761d8856f13fce2a571d2ee2f45092739e66934325294e9ed1232202e9d8020bbef116ecdc896a1cbbc03dcb46ceb648567f9e5122c3e8aae83b135f065be56b901364872e8ced765b105c5a60782c1dc537d60cf1661f1cb192881c8dd28b377711de6ff4b48e34966fd75e21993a7de9cded3320ca396396c3751cfd685d93012de91c222e2de2f0875d4ae50e6eed2f8f358a1fc9e66775d940355f2e9364cf387efadcfc4f12f55f16f0d177682623ae0ec17272ecb7d9780630c200210128e1328405624cb00900a48686643a6be745325dd28b087175c9d3b5e196699e434e666476dcb12ffb0e82939ed36dc9916286706a9c3ddec21e7e82a53ddb5f7b72091b19b6bfdcca58a1e391d0873c5576a9500f5e9fb4c6c028bc1d70bbd881286b753a39c285f0051b6781329a1514839cac18728f6f4419e9210be86941081fad98cd20c8e77105feacb73a0a67fffc5aee1ae9c3b9bf08bb72bfd7bb3c7d838878066f06fce8aa088863907dd4d899d2462a720e0076f132b483abfb55e855599d762694a069c7226449f7e2adcb50cb5ac3359051903c957bbeca5e22de820396d9cf8cb5d2a3a05494be4287", 0xbd3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x0) shutdown(r3, 0x0) execve(0x0, 0x0, 0x0) 01:00:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/229, 0xe5}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e00565) shutdown(r2, 0x0) shutdown(r3, 0x0) 01:00:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x98, 0xfb}}]}}]}}, 0x0) 01:00:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 534.908218][ T36] audit: type=1326 audit(1609462825.680:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16951 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 535.150810][ T9320] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 535.161716][ T36] audit: type=1326 audit(1609462825.930:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16937 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/228, 0xe4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000480)=""/183, 0xb7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/146, 0x92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r4, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="a9c3936d6ee888a2fff1dec76466cce89de782d2bef3928a50e1a8837889ff725a605aa7139b10ee8edae1428549a53ac722e62c67eb746d1739a7375040ab87fdc41f903e762c8a8b8b0a23e57e03066b343f1f2365e5732d90fc2716ef6f8a3de94b65c2243e662a4a201a8f908809dfef527a5ea60a4b974b66e1087dc2eb242ff47c2e9de07c04c51728833ffcbe", 0xffffff5a, 0x105, &(0x7f0000000000)={0xfffffffffffffea3, 0x1c, 0x2}, 0x1c) shutdown(r5, 0x0) shutdown(r3, 0x0) execve(0x0, 0x0, 0x0) [ 535.420973][ T9320] usb 3-1: Using ep0 maxpacket: 8 [ 535.731222][ T36] audit: type=1326 audit(1609462826.500:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16963 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 01:00:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x403000a, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c00b500ce0000560f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.', 0x1, 0x800}], 0x0, &(0x7f0000013800)) [ 535.780905][ T9320] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 535.790032][ T9320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.812491][ T9320] usb 3-1: Product: syz [ 535.816934][ T9320] usb 3-1: Manufacturer: syz [ 535.827880][ T9320] usb 3-1: SerialNumber: syz 01:00:26 executing program 1: syz_emit_ethernet(0x7ff, &(0x7f0000000280)={@empty, @empty, @val, {@generic={0x0, "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"}}}, 0x0) 01:00:26 executing program 0: keyctl$set_reqkey_keyring(0xe, 0xd848b28698be8320) [ 535.851979][ T9320] usb 3-1: config 0 descriptor?? 01:00:26 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffdbc4c3) rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/112, 0x70) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) 01:00:26 executing program 0: select(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x5}, 0x0, 0x0) 01:00:26 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) [ 536.019276][T17005] loop4: detected capacity change from 131456 to 0 [ 536.058067][T17005] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 536.109257][T17005] EXT4-fs (loop4): group descriptors corrupted! [ 536.130449][ T9320] usb 3-1: USB disconnect, device number 19 [ 536.234441][T17017] kvm [17014]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec 01:00:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10) write(r0, &(0x7f0000000140)="1100000052001f0014f9f407000904000a", 0x11) 01:00:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x13, 0xb6, 0xc, 0x10, 0x1fb9, 0x602, 0x822f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd0, 0xb9, 0x6a, 0x0, [], [{{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 01:00:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 536.758143][ T9320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 536.920743][ T9841] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 537.020681][ T9320] usb 4-1: Using ep0 maxpacket: 16 [ 537.166801][ T9320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 537.191321][ T9841] usb 3-1: Using ep0 maxpacket: 8 [ 537.361622][ T9320] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 537.376713][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.390539][ T9320] usb 4-1: Product: syz [ 537.398905][ T9320] usb 4-1: Manufacturer: syz [ 537.409847][ T9320] usb 4-1: SerialNumber: syz [ 537.427899][ T9320] usb 4-1: config 0 descriptor?? [ 537.491064][ T9841] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 537.502709][ T9320] cp210x 4-1:0.0: cp210x converter detected [ 537.509182][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.527361][ T9841] usb 3-1: Product: syz [ 537.533422][ T9841] usb 3-1: Manufacturer: syz [ 537.538188][ T9841] usb 3-1: SerialNumber: syz [ 537.548074][ T9841] usb 3-1: config 0 descriptor?? [ 537.720779][ T9320] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 537.735557][ T9320] cp210x 4-1:0.0: querying part number failed [ 537.811471][ T9741] usb 3-1: USB disconnect, device number 20 01:00:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x98, 0xfb}}]}}]}}, 0x0) 01:00:28 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 01:00:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 01:00:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCSLCKTRMIOS(r0, 0x560c, 0x0) 01:00:28 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000002240)='ns/pid_for_children\x00') [ 537.907494][ T9320] usb 4-1: cp210x converter now attached to ttyUSB0 01:00:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) [ 537.972353][ T9320] usb 4-1: USB disconnect, device number 2 01:00:28 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x4, 0x0) [ 538.063482][ T9320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.099502][ T9320] cp210x 4-1:0.0: device disconnected 01:00:28 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x13, 0xb6, 0xc, 0x10, 0x1fb9, 0x602, 0x822f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0xb9, 0x6a}}]}}]}}, 0x0) [ 538.262708][T17115] kvm [17114]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec [ 538.330788][ T9795] usb 1-1: new high-speed USB device number 16 using dummy_hcd 01:00:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c653100000010000000100005", 0x53, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f00000035c0)=""/98, 0x62) 01:00:29 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) [ 538.465253][ T9741] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 538.498621][T17130] loop4: detected capacity change from 4096 to 0 [ 538.536987][T17132] kvm [17129]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec [ 538.557464][T17130] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 538.621310][ T9784] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 538.640674][ T9320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 538.701097][ T9795] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 538.731648][ T9741] usb 3-1: Using ep0 maxpacket: 8 [ 538.868123][ T9784] usb 6-1: Using ep0 maxpacket: 16 [ 538.880891][ T9320] usb 4-1: Using ep0 maxpacket: 16 [ 538.961375][ T9795] usb 1-1: string descriptor 0 read error: -22 [ 538.967672][ T9795] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.980295][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.019157][ T9320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 539.021783][T17102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.061667][ T9741] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 539.075909][ T9741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.092798][ T9741] usb 3-1: Product: syz [ 539.120249][ T9741] usb 3-1: Manufacturer: syz [ 539.133135][ T9741] usb 3-1: SerialNumber: syz [ 539.149650][ T9741] usb 3-1: config 0 descriptor?? [ 539.166258][ T9784] usb 6-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 539.191436][ T9320] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 539.211466][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.226388][ T9784] usb 6-1: Product: syz [ 539.253878][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.257381][ T9784] usb 6-1: Manufacturer: syz [ 539.272452][ T9320] usb 4-1: Product: syz [ 539.303001][ T9320] usb 4-1: Manufacturer: syz [ 539.311782][ T9320] usb 4-1: SerialNumber: syz [ 539.313245][ T9784] usb 6-1: SerialNumber: syz [ 539.321196][ T9741] usb 1-1: USB disconnect, device number 16 [ 539.344295][ T9320] usb 4-1: config 0 descriptor?? [ 539.400014][ T9784] usb 6-1: config 0 descriptor?? [ 539.482023][ T9784] cp210x 6-1:0.0: cp210x converter detected 01:00:30 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x3, &(0x7f0000001d00)=@framed, &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:00:30 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x1000) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x85, 0x10, 0x3a, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x81, 0x40, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x8, 0x20}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xd, 0x3d, 0x80, 0x20, 0x20}, 0x13, &(0x7f0000000200)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x40}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1001}}, {0x32, &(0x7f0000000280)=@string={0x32, 0x3, "0adb53602342e52d181d2cfae46db570e2fc7660f4b82d7bf8edb5c06c4f49b8a83ef055b934f4c1fb156ab08c4387ae"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0x102, &(0x7f0000000340)=@string={0x102, 0x3, "badacfdd25942a6f5d643bde06dca60bb1927101a531e8c1fafda66ee9ee008c2a91627d4ee55f61f56f25f7a315b57b262268cda304d2c40ab502309271ec69a479381ddfe8d6175d1cbc1ef00712c324074903a1ac1142c12107e8e2ec6ee3946973c0037aed680a082023a3e4d080cf272f3c8574977b2ea8d2201e3d5a66b7421891d5c625a7407cb76a2a8d30d4047e4599ff8469f1903a8f8eb5bfdf2857a194de2be0264e0dbb5e14d93a0607a2af7928aa61bb0c4a427102405d87d6ce6f2c2cb16f46585848f474148dd432c785fd7176037e0ccb790a3d17390a0abff1bb8a92cf5a47b8b3ee9fb448eb86bec32d856b26d0dcdd97184183846b29"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x8bf49fee6c24d4f3}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x1c, &(0x7f0000000500)=@string={0x1c, 0x3, "c5fb98702e050f7de9425360e2fd7cfd10f034ac35552b5de583"}}, {0xe9, &(0x7f0000000540)=@string={0xe9, 0x3, "20f43e7ba1476f875393e326626ff1ef6eb4b580ff4edbbb4fed46e07290dfdebea984fb3587bb018cb07da2bd081891a038a809c492cf27663a4f4aaec3107318c1408ae9aa97f541a7e7349a528592c863ae94ad60c736c5cb8f86df0a93b584d4ac3643bfa4095724b1ab812e54c4db324ba81376020dc15697acc0f30715140f03990dcec7009a58ea8a5849a839e6b049c064ce22980fe95c49d006bffb0cc4d325c43e4311a33b72cfe172e516d68faf27697da246b6a8ce8ce1a8243d80e4041ce410d7b6dfb43d22eab03a1529f41111c46f2247607d6e20f572856cf12967a8315e37"}}, {0x52, &(0x7f0000000640)=@string={0x52, 0x3, "821aaa332c3f261eda565c1e2daae327c01552e0797470e4eddab04e1812a5ef04fac512dc114af8b095086b9dbe447069ea1ec2aace75c6aa094701dd7e625148f955f99999786120c9b22a5ff1ec5c"}}]}) [ 539.540686][ T9320] usb 4-1: can't set config #0, error -71 [ 539.559469][ T9320] usb 4-1: USB disconnect, device number 3 [ 539.584478][T17100] usb 3-1: USB disconnect, device number 21 [ 539.700714][ T9784] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 539.708829][ T9784] cp210x 6-1:0.0: querying part number failed [ 539.752510][ T9784] usb 6-1: cp210x converter now attached to ttyUSB0 [ 539.854000][ T9784] usb 6-1: USB disconnect, device number 16 [ 539.915075][ T9784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.958747][ T9784] cp210x 6-1:0.0: device disconnected [ 540.000561][ T9795] usb 2-1: new high-speed USB device number 87 using dummy_hcd 01:00:30 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x98, 0xfb}}]}}]}}, 0x0) [ 540.150757][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 540.440771][ T9795] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 540.451292][ T9795] usb 2-1: config 1 interface 0 has no altsetting 0 [ 540.463508][ T9784] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 540.491268][ T9350] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 540.511301][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 540.610799][ T9795] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 540.620099][ T9795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.633724][ T9795] usb 2-1: Product: ї [ 540.637845][ T9795] usb 2-1: Manufacturer: 恓䈣ⷥᴘ館淤炵ﳢ恶룴笭삵佬롉㺨嗰㒹쇴ᗻ끪䎌꺇 [ 540.649754][ T9795] usb 2-1: SerialNumber: К [ 540.671638][T17170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.721141][ T9784] usb 6-1: Using ep0 maxpacket: 16 [ 540.750594][ T9350] usb 3-1: Using ep0 maxpacket: 8 [ 540.761029][ T7] usb 1-1: string descriptor 0 read error: -22 [ 540.768716][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 540.778404][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.812205][T17102] raw-gadget gadget: fail, usb_ep_enable returned -22 01:00:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 01:00:31 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 01:00:31 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4752}, &(0x7f0000000200)={0x77359400}, 0x0) [ 540.936844][ T7] usb 1-1: USB disconnect, device number 17 [ 540.990695][ T9795] usblp: can't set desired altsetting 2 on interface 0 [ 541.001201][ T9784] usb 6-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 541.010295][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.030934][ T9350] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 541.047211][ T9350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.066103][ T9795] usb 2-1: USB disconnect, device number 87 [ 541.082054][ T9784] usb 6-1: Product: syz [ 541.092894][ T9350] usb 3-1: Product: syz [ 541.113845][ T9784] usb 6-1: Manufacturer: syz [ 541.119149][ T9350] usb 3-1: Manufacturer: syz [ 541.126603][ T9784] usb 6-1: SerialNumber: syz [ 541.132011][ T9350] usb 3-1: SerialNumber: syz [ 541.143326][ T9784] usb 6-1: config 0 descriptor?? [ 541.162253][ T9350] usb 3-1: config 0 descriptor?? [ 541.192592][ T9784] cp210x 6-1:0.0: cp210x converter detected 01:00:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_IE={0x14, 0x2a, [@cf={0x4, 0x6}, @supported_rates, @ext_channel_switch={0x3c, 0x4}]}]}, 0x70}}, 0x0) 01:00:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r7, r8, &(0x7f0000000240)=0x4b, 0x4000000000dc) [ 541.311055][ T9784] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 541.320805][ T9784] cp210x 6-1:0.0: querying part number failed [ 541.352695][ T9784] usb 6-1: cp210x converter now attached to ttyUSB0 [ 541.365544][ T9784] usb 6-1: USB disconnect, device number 17 [ 541.378295][ T9784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 541.388510][ T9784] cp210x 6-1:0.0: device disconnected 01:00:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mr_dereg\x00'}, 0x10) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:00:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x2400}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 541.505021][ T9320] usb 3-1: USB disconnect, device number 22 01:00:32 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 01:00:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "2fd555a1ba8eb771040d762351b9473f"}) r4 = dup2(r2, r0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 541.674455][T17272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:00:32 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000d00)=""/222, 0xde}], 0x57}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') pipe2(&(0x7f00000000c0), 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 01:00:32 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) write$evdev(r0, &(0x7f0000000180)=[{}], 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x808001) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000440)=""/4096, 0x1000) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_bridge\x00', {0x2}, 0x8}) 01:00:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x98, 0xfb}}]}}]}}, 0x0) 01:00:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0xc3, 0x9, 0xca, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() tkill(r4, 0x10) 01:00:33 executing program 4: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:00:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:00:33 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setparam(r1, &(0x7f0000000140)) [ 542.520518][ T8697] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 542.770400][ T8697] usb 3-1: Using ep0 maxpacket: 8 01:00:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r7, r8, &(0x7f0000000240)=0x4b, 0x4000000000dc) 01:00:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000202", 0x12, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 01:00:33 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 01:00:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x2400}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0xd5c00}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 542.810987][ T9350] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 542.873186][T17325] loop0: detected capacity change from 4096 to 0 [ 542.918321][T17325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 542.994978][T17332] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 543.051663][ T8697] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 543.080984][ T8697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.119653][ T8697] usb 3-1: Product: syz [ 543.134660][ T8697] usb 3-1: Manufacturer: syz [ 543.151296][ T8697] usb 3-1: SerialNumber: syz [ 543.169040][ T8697] usb 3-1: config 0 descriptor?? 01:00:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x2400}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 543.201820][ T9350] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 01:00:34 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f00000031c0)=ANY=[], 0xed0, 0x0) 01:00:34 executing program 3: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x6) [ 543.244390][ T9350] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.279810][ T9350] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.305656][ T9350] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.336982][ T9350] usb 5-1: config 1 interface 1 has no altsetting 0 [ 543.501069][ T9350] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.541342][ T9350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.591144][T17352] loop1: detected capacity change from 512 to 0 [ 543.611469][ T9350] usb 5-1: Product: syz [ 543.657014][ T9350] usb 5-1: Manufacturer: syz [ 543.684164][T17361] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 543.720686][ T9350] usb 5-1: SerialNumber: syz [ 543.765862][T17352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.796163][ T9795] usb 3-1: USB disconnect, device number 23 [ 544.141676][ T9350] usb 5-1: USB disconnect, device number 9 01:00:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r7, r8, &(0x7f0000000240)=0x4b, 0x4000000000dc) 01:00:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xb) [ 544.347815][T17405] loop3: detected capacity change from 4096 to 0 [ 544.409658][T17405] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 544.473404][T17409] EXT4-fs error (device loop3): ext4_lookup:1699: inode #2: comm syz-executor.3: deleted inode referenced: 12 [ 544.495125][T17405] EXT4-fs error (device loop3): ext4_lookup:1699: inode #2: comm syz-executor.3: deleted inode referenced: 12 [ 544.810475][ T9795] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 545.180462][ T9795] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 545.191572][ T9795] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 545.220353][ T9795] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.233309][ T9795] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.245395][ T9795] usb 5-1: config 1 interface 1 has no altsetting 0 [ 545.439849][ T9795] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.456806][ T9795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:00:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) r4 = dup2(0xffffffffffffffff, r0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x419820, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:00:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 01:00:36 executing program 1: uname(&(0x7f0000000100)=""/133) 01:00:36 executing program 2: syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1, 0x0, 0x9, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x200}}]}}]}}]}}, 0x0) 01:00:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xb) 01:00:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r7, r8, &(0x7f0000000240)=0x4b, 0x4000000000dc) [ 545.520192][ T9795] usb 5-1: Product: syz [ 545.524442][ T9795] usb 5-1: Manufacturer: syz [ 545.529069][ T9795] usb 5-1: SerialNumber: syz [ 545.640615][ T9795] usb 5-1: can't set config #1, error -71 [ 545.649908][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.667267][ T9795] usb 5-1: USB disconnect, device number 10 01:00:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 545.690559][T17447] loop3: detected capacity change from 4096 to 0 [ 545.701023][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.708281][T17444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.781988][T17447] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 01:00:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) [ 545.901872][ T9784] usb 3-1: new high-speed USB device number 24 using dummy_hcd 01:00:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xb) [ 546.150155][ T9784] usb 3-1: Using ep0 maxpacket: 8 [ 546.270605][ T9784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 546.272607][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.347056][ T9784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 01:00:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) [ 546.495513][T17469] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.502748][T17469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.610381][ T9784] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 546.619512][ T9784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.653943][T17476] loop3: detected capacity change from 4096 to 0 [ 546.678449][ T9784] usb 3-1: Product: syz [ 546.693226][ T9784] usb 3-1: Manufacturer: syz 01:00:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x74, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x74}}, 0x0) [ 546.700698][ T9784] usb 3-1: SerialNumber: syz [ 546.708098][ T9784] usb 3-1: config 0 descriptor?? 01:00:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) [ 546.951201][T17476] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 547.008322][ T20] usb 3-1: USB disconnect, device number 24 01:00:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xb) [ 547.157844][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.200547][T17506] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.207740][T17506] bridge0: port 2(bridge_slave_1) entered forwarding state 01:00:38 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 01:00:38 executing program 4: mlockall(0x1) getgid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) [ 547.448879][T17514] loop3: detected capacity change from 4096 to 0 [ 547.589470][T17514] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 547.783147][ T20] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 548.050124][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 548.180597][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 548.203345][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 548.400414][ T20] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 548.414833][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.435843][ T20] usb 3-1: Product: syz [ 548.446980][ T20] usb 3-1: Manufacturer: syz [ 548.458539][ T20] usb 3-1: SerialNumber: syz [ 548.477985][ T20] usb 3-1: config 0 descriptor?? 01:00:39 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa812d70c2a358d81, 0x0) 01:00:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 01:00:39 executing program 1: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x0) 01:00:39 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 01:00:39 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 548.633637][ T9320] usb 3-1: USB disconnect, device number 25 [ 548.799003][T17554] ptrace attach of "/root/syz-executor.5"[17551] was attempted by "/root/syz-executor.5"[17554] [ 548.816740][T17550] bridge0: port 2(bridge_slave_1) entered disabled state 01:00:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "2fd555a1ba8eb771040d762351b9473f"}) r5 = dup2(r2, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:00:39 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0xff, 0x98, 0xfb}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x42, 0x97, 0x8c, 0x0, [], [{{0x9, 0x5, 0xb, 0x3}}]}}]}}]}}, 0x0) [ 548.851705][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.858937][T17550] bridge0: port 2(bridge_slave_1) entered forwarding state 01:00:39 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x97, 0x8c}}]}}]}}, 0x0) 01:00:39 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x16, 0x0}) [ 549.060158][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 549.260120][ T9350] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 549.450122][T17100] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 549.460248][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.510776][ T9741] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 549.522019][ T9350] usb 2-1: Using ep0 maxpacket: 8 [ 549.530563][ T20] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 549.545862][ T20] usb 4-1: can't read configurations, error -71 01:00:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "2fd555a1ba8eb771040d762351b9473f"}) r5 = dup2(r2, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 549.640753][ T9350] usb 2-1: config 0 has an invalid interface number: 163 but max is 1 [ 549.648993][ T9350] usb 2-1: config 0 has no interface number 1 [ 549.675894][ T9350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 549.711976][ T9350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 549.730087][T17100] usb 3-1: Using ep0 maxpacket: 8 [ 549.760043][ T9741] usb 1-1: Using ep0 maxpacket: 8 [ 549.880342][ T9741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 549.896940][ T9741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 549.921136][ T9350] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 549.939663][ T9350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.968425][ T9350] usb 2-1: Product: syz [ 549.999657][ T9350] usb 2-1: Manufacturer: syz [ 550.028024][ T9350] usb 2-1: SerialNumber: syz [ 550.058663][ T9350] usb 2-1: config 0 descriptor?? [ 550.071247][T17100] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 550.093433][T17100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.123671][T17100] usb 3-1: Product: syz [ 550.130491][ T9741] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 550.139684][ T9741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.159265][T17100] usb 3-1: Manufacturer: syz 01:00:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "2fd555a1ba8eb771040d762351b9473f"}) r5 = dup2(r2, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 550.176373][T17100] usb 3-1: SerialNumber: syz [ 550.186154][ T9741] usb 1-1: Product: syz [ 550.198242][T17100] usb 3-1: config 0 descriptor?? [ 550.211909][ T9741] usb 1-1: Manufacturer: syz [ 550.225300][ T9741] usb 1-1: SerialNumber: syz [ 550.246150][ T9741] usb 1-1: config 0 descriptor?? [ 550.251686][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 550.321185][ T9350] usb 2-1: USB disconnect, device number 88 01:00:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000d00)=""/222, 0xde}], 0x57}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') pipe2(&(0x7f00000000c0), 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 550.466718][ T9784] usb 3-1: USB disconnect, device number 26 [ 550.526927][ T8697] usb 1-1: USB disconnect, device number 18 01:00:41 executing program 3: syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1, 0x0, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x200}}]}}]}}]}}, 0x0) [ 550.640375][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short 01:00:41 executing program 4: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 550.710158][ T20] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 550.724921][ T20] usb 4-1: can't read configurations, error -71 [ 550.763686][ T20] usb usb4-port1: attempt power cycle 01:00:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x68, 0x0}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "2fd555a1ba8eb771040d762351b9473f"}) r5 = dup2(r2, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:00:41 executing program 4: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 551.110408][ T8697] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 551.300293][ T9784] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 551.305577][T17100] usb 3-1: new high-speed USB device number 27 using dummy_hcd 01:00:42 executing program 4: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 551.380042][ T8697] usb 2-1: Using ep0 maxpacket: 8 01:00:42 executing program 5: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 551.500270][ T8697] usb 2-1: config 0 has an invalid interface number: 163 but max is 1 [ 551.510663][ T20] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 551.515598][ T8697] usb 2-1: config 0 has no interface number 1 [ 551.549172][ T8697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 551.562478][ T9784] usb 1-1: Using ep0 maxpacket: 8 [ 551.599945][T17100] usb 3-1: Using ep0 maxpacket: 8 [ 551.620900][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 551.622353][ T8697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 551.680272][ T9784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 551.721432][ T9784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 551.748543][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 551.770719][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 551.829308][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 551.889931][ T8697] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 551.901267][T17100] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 551.908346][ T9784] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 551.916991][T17100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.919564][ T9784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:00:42 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0xff, 0x98, 0xfb}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x42, 0x97, 0x8c, 0x0, [], [{{0x9, 0x5, 0xb, 0x3}}]}}]}}]}}, 0x0) [ 551.919597][ T9784] usb 1-1: Product: syz [ 551.919618][ T9784] usb 1-1: Manufacturer: syz [ 551.928622][T17100] usb 3-1: Product: syz [ 551.937179][ T8697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.954395][T17100] usb 3-1: Manufacturer: syz [ 551.973830][T17100] usb 3-1: SerialNumber: syz [ 551.989864][ T9784] usb 1-1: SerialNumber: syz [ 552.007277][ T9784] usb 1-1: config 0 descriptor?? [ 552.008236][T17100] usb 3-1: config 0 descriptor?? [ 552.020733][ T8697] usb 2-1: Product: syz [ 552.020775][ T20] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 552.024922][ T8697] usb 2-1: Manufacturer: syz [ 552.024944][ T8697] usb 2-1: SerialNumber: syz [ 552.044362][ T8697] usb 2-1: config 0 descriptor?? [ 552.057890][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.073504][ T8697] usb 2-1: can't set config #0, error -71 01:00:42 executing program 2: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 552.091893][ T8697] usb 2-1: USB disconnect, device number 89 [ 552.099471][ T20] usb 4-1: Product: syz [ 552.114880][ T20] usb 4-1: Manufacturer: syz [ 552.130529][ T20] usb 4-1: SerialNumber: syz [ 552.149952][T17100] usb 3-1: can't set config #0, error -71 [ 552.159580][T17100] usb 3-1: USB disconnect, device number 27 [ 552.181429][ T20] usb 4-1: config 0 descriptor?? 01:00:43 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x16, 0x0}) 01:00:43 executing program 4: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:00:43 executing program 5: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 552.276767][ T20] usb 1-1: USB disconnect, device number 19 [ 552.439313][T17100] usb 4-1: USB disconnect, device number 6 01:00:43 executing program 5: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 552.590058][ T8697] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 552.839878][ T8697] usb 2-1: Using ep0 maxpacket: 8 [ 552.899943][ T20] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 552.960434][ T8697] usb 2-1: config 0 has an invalid interface number: 163 but max is 1 [ 552.979611][ T8697] usb 2-1: config 0 has no interface number 1 [ 552.997426][ T8697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 553.011279][ T8697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 553.159781][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 553.180221][ T8697] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 553.202334][ T8697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.222448][ T9841] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 553.225451][ T8697] usb 2-1: Product: syz [ 553.273815][ T8697] usb 2-1: Manufacturer: syz [ 553.280237][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 553.295053][ T8697] usb 2-1: SerialNumber: syz [ 553.331361][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 553.340566][ T8697] usb 2-1: config 0 descriptor?? [ 553.490429][ T9841] usb 4-1: Using ep0 maxpacket: 8 [ 553.580191][ T20] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 553.589310][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.615779][ T20] usb 1-1: Product: syz [ 553.621698][ T20] usb 1-1: Manufacturer: syz [ 553.626390][ T20] usb 1-1: SerialNumber: syz [ 553.640072][ T9841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 553.714819][ T20] usb 1-1: config 0 descriptor?? [ 553.729776][ T9841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 553.768189][ T8697] usb 2-1: USB disconnect, device number 90 01:00:44 executing program 3: capget(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) [ 553.826386][ T9841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 01:00:44 executing program 2: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:00:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 01:00:44 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xb4, 0xfa, 0x23, 0x8, 0x8087, 0x7d9, 0x165f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0x3d, 0x33, 0x5d}}, {{0x9, 0x4, 0x0, 0x6, 0x0, 0x2, 0x6}}]}}]}}, 0x0) [ 553.949959][ T9841] usb 4-1: string descriptor 0 read error: -71 [ 553.956476][ T9841] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 554.064533][ T9841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.088649][T17772] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 554.116077][ T9841] usb 4-1: config 0 descriptor?? [ 554.143170][ T8697] usb 1-1: USB disconnect, device number 20 01:00:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) 01:00:45 executing program 2: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000380)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(0xffffffffffffffff, 0x35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x918}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 554.209977][ T9841] usb 4-1: can't set config #0, error -71 [ 554.232292][ T9841] usb 4-1: USB disconnect, device number 7 01:00:45 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0xff, 0x98, 0xfb}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x42, 0x97, 0x8c, 0x0, [], [{{0x9, 0x5, 0xb, 0x3}}]}}]}}]}}, 0x0) 01:00:45 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x580e24b82c222bd8, 0x0) [ 554.390042][T17100] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 554.569147][T17790] overlayfs: failed to resolve './bus': -2 [ 554.588732][ T36] audit: type=1804 audit(1609462845.361:10): pid=17796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir541556544/syzkaller.jZhBEM/321/bus/file0" dev="sda1" ino=16357 res=1 errno=0 [ 554.638498][T17796] overlayfs: './file0' not a directory [ 554.669806][T17100] usb 6-1: Using ep0 maxpacket: 8 [ 554.684955][ T36] audit: type=1804 audit(1609462845.441:11): pid=17790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir541556544/syzkaller.jZhBEM/321/bus/bus/file0" dev="sda1" ino=16384 res=1 errno=0 01:00:45 executing program 3: r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) ioprio_set$uid(0x0, 0x0, 0x2000) 01:00:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001140)={{0x0, 0x0, 0x80}}) 01:00:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x4f) 01:00:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x16, 0x0}) [ 554.800180][T17100] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 554.809801][ T9320] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 554.860521][T17100] usb 6-1: config 0 interface 0 has no altsetting 0 [ 554.899905][T17100] usb 6-1: config 0 interface 0 has no altsetting 1 01:00:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:00:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a", 0x1f, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 01:00:45 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4752}, &(0x7f0000000200)={0x77359400}, 0x0) [ 555.099795][T17100] usb 6-1: New USB device found, idVendor=8087, idProduct=07d9, bcdDevice=16.5f [ 555.109371][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 555.117532][T17100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.138884][T17100] usb 6-1: Product: syz [ 555.145456][T17821] loop3: detected capacity change from 4096 to 0 [ 555.153643][T17100] usb 6-1: Manufacturer: syz [ 555.164287][T17100] usb 6-1: SerialNumber: syz [ 555.176530][T17100] usb 6-1: config 0 descriptor?? [ 555.194694][T17821] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 555.206138][ T8697] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 555.240019][ T9320] usb 2-1: config 0 has an invalid interface number: 163 but max is 1 [ 555.276081][ T9320] usb 2-1: config 0 has no interface number 1 [ 555.304563][ T9320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 555.351710][ T9320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 555.449753][ T8697] usb 1-1: Using ep0 maxpacket: 8 [ 555.458607][T17100] usb 6-1: USB disconnect, device number 18 [ 555.560302][ T9320] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 555.570084][ T8697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 555.572271][ T9320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.594686][ T8697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 555.601243][ T9320] usb 2-1: Product: syz [ 555.609252][ T9320] usb 2-1: Manufacturer: syz [ 555.622325][ T9320] usb 2-1: SerialNumber: syz [ 555.640273][ T9320] usb 2-1: config 0 descriptor?? [ 555.779812][ T8697] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 555.799669][ T8697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.807736][ T8697] usb 1-1: Product: syz [ 555.819732][ T8697] usb 1-1: Manufacturer: syz [ 555.824373][ T8697] usb 1-1: SerialNumber: syz [ 555.841443][ T8697] usb 1-1: config 0 descriptor?? [ 555.926464][ T8697] usb 2-1: USB disconnect, device number 91 [ 556.239770][ T9320] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 556.320227][ T9841] usb 1-1: USB disconnect, device number 21 [ 556.490414][ T9320] usb 6-1: Using ep0 maxpacket: 8 [ 556.609844][ T9320] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 556.634588][ T9320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 556.649630][ T9320] usb 6-1: config 0 interface 0 has no altsetting 1 [ 556.870064][ T9320] usb 6-1: New USB device found, idVendor=8087, idProduct=07d9, bcdDevice=16.5f [ 556.882704][ T9320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:00:47 executing program 5: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) syz_genetlink_get_family_id$SEG6(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x10, 0x3a, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x81, 0x40, 0x7}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0xd, 0x3d, 0x80, 0x0, 0x20}, 0x13, &(0x7f0000000200)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x40}]}, 0x8, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0xda, &(0x7f0000000340)=@string={0xda, 0x3, "badacfdd25942a6f5d643bde06dca60bb1927101a531e8c1fafda66ee9ee008c2a91627d4ee55f61f56f25f7a315b57b262268cda304d2c40ab502309271ec69a479381ddfe8d6175d1cbc1ef00712c324074903a1ac1142c12107e8e2ec6ee3946973c0037aed680a082023a3e4d080cf272f3c8574977b2ea8d2201e3d5a66b7421891d5c625a7407cb76a2a8d30d4047e4599ff8469f1903a8f8eb5bfdf2857a194de2be0264e0dbb5e14d93a0607a2af7928aa61bb0c4a427102405d87d6ce6f2c2cb16f46585848f474148dd432c785fd7176037e0c"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x1c, &(0x7f0000000500)=@string={0x1c, 0x3, "c5fb98702e050f7de9425360e2fd7cfd10f034ac35552b5de583"}}, {0xe0, &(0x7f0000000540)=@string={0xe0, 0x3, "20f43e7ba1476f875393e326626ff1ef6eb4b580ff4edbbb4fed46e07290dfdebea984fb3587bb018cb07da2bd081891a038a809c492cf27663a4f4aaec3107318c1408ae9aa97f541a7e7349a528592c863ae94ad60c736c5cb8f86df0a93b584d4ac3643bfa4095724b1ab812e54c4db324ba81376020dc15697acc0f30715140f03990dcec7009a58ea8a5849a839e6b049c064ce22980fe95c49d006bffb0cc4d325c43e4311a33b72cfe172e516d68faf27697da246b6a8ce8ce1a8243d80e4041ce410d7b6dfb43d22eab03a1529f41111c46f2247607d6e20f572"}}, {0x48, &(0x7f0000000640)=@string={0x48, 0x3, "821aaa332c3f261eda565c1e2daae327c01552e0797470e4eddab04e1812a5ef04fac512dc114af8b095086b9dbe447069ea1ec2aace75c6aa094701dd7e625148f955f99999"}}]}) 01:00:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a", 0x1f, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 01:00:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea2, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 01:00:47 executing program 4: syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x13, 0xb6, 0xc, 0x10, 0x1fb9, 0x602, 0x822f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd0, 0xb9, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}]}}]}}]}}, 0x0) 01:00:47 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0xff, 0x98, 0xfb}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x42, 0x97, 0x8c, 0x0, [], [{{0x9, 0x5, 0xb, 0x3}}]}}]}}]}}, 0x0) 01:00:47 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x16, 0x0}) [ 556.987637][ T9320] usb 6-1: Product: syz [ 556.999610][ T9320] usb 6-1: Manufacturer: syz [ 557.004648][ T9320] usb 6-1: SerialNumber: syz [ 557.015217][ T9320] usb 6-1: config 0 descriptor?? [ 557.039735][ T9320] usb 6-1: can't set config #0, error -71 [ 557.047132][ T9320] usb 6-1: USB disconnect, device number 19 [ 557.120603][T17896] loop3: detected capacity change from 4096 to 0 [ 557.183077][T17897] loop2: detected capacity change from 87 to 0 [ 557.223793][T17896] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 557.235383][T17897] FAT-fs (loop2): Unrecognized mount option "./cgroup.cpu/syz0" or missing value 01:00:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a", 0x1f, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) [ 557.380854][T17897] loop2: detected capacity change from 87 to 0 [ 557.406351][T17897] FAT-fs (loop2): Unrecognized mount option "./cgroup.cpu/syz0" or missing value [ 557.410505][ T9795] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 557.428131][ T9841] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 557.459964][ T9784] usb 1-1: new high-speed USB device number 22 using dummy_hcd 01:00:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) [ 557.599642][ T9320] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 557.629095][T17923] loop3: detected capacity change from 4096 to 0 [ 557.669993][ T9841] usb 2-1: Using ep0 maxpacket: 8 [ 557.680352][ T9795] usb 5-1: Using ep0 maxpacket: 16 [ 557.701321][T17923] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 557.709623][ T9784] usb 1-1: Using ep0 maxpacket: 8 01:00:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 557.799902][ T9795] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 557.800183][ T9841] usb 2-1: config 0 has an invalid interface number: 163 but max is 1 [ 557.850042][ T9784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 557.867182][ T9784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 01:00:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a", 0x1f, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) [ 557.896799][ T9841] usb 2-1: config 0 has no interface number 1 [ 557.934164][ T9841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 557.979853][ T9795] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 557.993886][ T9841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 558.005959][ T9795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.029933][ T9795] usb 5-1: Product: syz [ 558.050085][ T9784] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 558.063927][ T9795] usb 5-1: Manufacturer: syz [ 558.068733][ T9784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.070309][ T9320] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 558.091451][ T9795] usb 5-1: SerialNumber: syz [ 558.107107][ T9784] usb 1-1: Product: syz [ 558.115323][ T9795] usb 5-1: config 0 descriptor?? [ 558.124411][ T9784] usb 1-1: Manufacturer: syz 01:00:48 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x98, 0xfb, 0x0, [], [{}]}}]}}]}}, 0x0) [ 558.147969][ T9320] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.148317][ T9784] usb 1-1: SerialNumber: syz [ 558.181168][ T9795] cp210x 5-1:0.0: cp210x converter detected [ 558.220367][ T9841] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 558.240270][ T9320] usb 6-1: language id specifier not provided by device, defaulting to English [ 558.253992][ T9784] usb 1-1: config 0 descriptor?? [ 558.259851][ T9841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.292604][ T9841] usb 2-1: Product: syz [ 558.307480][ T9841] usb 2-1: Manufacturer: syz [ 558.325273][ T9841] usb 2-1: SerialNumber: syz [ 558.371303][ T9841] usb 2-1: config 0 descriptor?? [ 558.389622][ T9795] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 558.390038][ T9320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 558.400006][ T9795] cp210x 5-1:0.0: querying part number failed [ 558.433446][ T9320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.484705][ T9795] usb 5-1: cp210x converter now attached to ttyUSB0 [ 558.485099][ T9320] usb 6-1: Product: К [ 558.515966][ T9795] usb 5-1: USB disconnect, device number 11 [ 558.517972][ T9320] usb 6-1: Manufacturer: ї [ 558.542001][ T9320] usb 6-1: SerialNumber: 򾧏鐥漪摝஦銱űㆥ쇨ﷺ溦谀鄪絢慟濵ᖣ箵∦쵨ң쓒딊。熒槬禤ᴸ៖ᱝẼ߰쌒ܤ͉겡䈑⇁榔쁳稃棭ࠊ⌠胐⟏㰯璅算꠮⃒㴞晚䊷鄘웕ꜥ籀檷贪퐰縄饅蓿㪐躏뾵⣟ꅗ並묍ᑞ㫙܆꾢⡹憪಻䉊ɱ嵀횇濎Ⱜ澱塆䡘瓴贔㋔藇燽Ͷ౾ [ 558.575878][ T9795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 558.601352][ T9795] cp210x 5-1:0.0: device disconnected [ 558.619606][ T8697] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 558.636216][ T9784] usb 1-1: USB disconnect, device number 22 [ 558.700143][T17907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 558.725661][ T9350] usb 2-1: USB disconnect, device number 92 [ 558.737141][T17984] loop3: detected capacity change from 4096 to 0 [ 558.762931][T17984] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 558.870800][ T8697] usb 3-1: Using ep0 maxpacket: 8 [ 558.965078][ T9320] usb 6-1: USB disconnect, device number 20 [ 558.990763][ T8697] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 01:00:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xfff) [ 559.229682][ T9784] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 559.249883][ T8697] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 559.270409][ T8697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.305854][ T8697] usb 3-1: Product: syz [ 559.350012][ T8697] usb 3-1: Manufacturer: syz [ 559.395725][ T8697] usb 3-1: SerialNumber: syz [ 559.426387][ T8697] usb 3-1: config 0 descriptor?? [ 559.489680][ T9784] usb 5-1: Using ep0 maxpacket: 16 [ 559.609845][ T9784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 559.700607][ T9350] usb 3-1: USB disconnect, device number 28 [ 559.779884][ T9784] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 559.793520][ T9795] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 559.815450][ T9784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.835107][ T9784] usb 5-1: Product: syz [ 559.844261][ T9784] usb 5-1: Manufacturer: syz [ 559.858946][ T9784] usb 5-1: SerialNumber: syz [ 559.887516][ T9784] usb 5-1: config 0 descriptor?? [ 559.951865][ T9784] cp210x 5-1:0.0: cp210x converter detected [ 560.129709][ T9784] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 560.139016][ T9784] cp210x 5-1:0.0: querying part number failed [ 560.183351][ T9784] usb 5-1: cp210x converter now attached to ttyUSB0 [ 560.222338][ T9784] usb 5-1: USB disconnect, device number 12 [ 560.249625][ T9795] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 560.265677][ T9784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 560.277211][ T9795] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.312701][ T9784] cp210x 5-1:0.0: device disconnected 01:00:51 executing program 5: syz_usb_connect(0x0, 0x62b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x619, 0x3, 0x0, 0x1f, 0x50, 0x0, [{{0x9, 0x4, 0xa3, 0x3f, 0x7, 0xff, 0x98, 0xfb, 0x81, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0x7, "f81e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x8, "053d"}]}, @generic={0x1d, 0x23, "212b211e3c6b4c83d59b051a7588951653fcce994010538e9d5458"}], [{{0x9, 0x5, 0xc, 0x1, 0x200, 0x9, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0x3f, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x3, 0x9, 0x2, [@generic={0x7a, 0x21, "9783d058781457e4f99156cfc4c6bdeaa05ab222bc0bccfb5389b80c8f80282660b562db37f1fd10a3f6a0dcc367f569f028b42b1311ec5460f0374c5205d466925baf4e50c14d199d09b12fd28ead24ffc06b551c6e0e419eb39394f66bf874cd4c42235bc5a0fd07b3ff3c3de8149c61047e65f77eb10f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x7, 0x7, 0x1f}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x2}}]}}, {{0x9, 0x4, 0x85, 0x1f, 0x8, 0xed, 0x2d, 0x37, 0x9, [@hid_hid={0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xc64}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f188"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x8, 0x2, 0x5}, [@mdlm_detail={0x50, 0x24, 0x13, 0x81, "f16964a35afee700866d49e591d4165c3b37267911e244a09fae0086c05f3e4a5389f66c74360ed90b7401b7c4cd1956c3a52838784c91044b4bad50ddc0b9c6fc08df992fd87ffccd85ad87"}, @dmm={0x7, 0x24, 0x14, 0x98c0, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xd1e}, @mdlm_detail={0x2a, 0x24, 0x13, 0x3, "5bc0dc184487e6be3a73ff8311d9ee2e11ea9994b8f34c4a50feef281f1d6529b7d83f65b941"}, @ncm={0x6, 0x24, 0x1a, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1f, 0x8}]}], [{{0x9, 0x5, 0x5, 0x4, 0x20, 0x1, 0x1, 0x40}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8c, 0x7f, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0xa0, 0x70, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd9, 0x9}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xb8, 0x28, 0x2, [@generic={0x77, 0x23, "11d612321c475161308521be9c130a42978ab5da4fc2ea0642de57c615ada5a547ad3b874a412df483f88466269027075a4f455732e7bc030e617d6586a560064d8015c5d525ac75e93a818dde9273d185a80bf44dff59e2579e1dc5d8fe7597e03f10e36a0a9f69a6810c8ab68f7146d44f33c833"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x1f, 0x9, 0x1f, [@generic={0x4c, 0x9, "e02705aaeb546939986c93b68339cc4c5a3a061cc77412a37c67717845cd314987dd151f379d77c42d2693feaad1ddffb673f444dffd44bdd99adf4d758c943254f8a818481a56c8d9ff"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x3, 0x1, 0x0, [@generic={0x55, 0x0, "cf84c24ae8f139daf69bcc7fa653562b6ca486d982692c60053db3ed539c53ef528d8ca8a4d6666ca2508cd4b723c12ac209a50bb65a058fb2b1bcdb3ba3d2dd6c84d1bce95cbce390c790ce960d2fd1e245fb"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x4, 0x7, 0x40}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x80, 0x42, 0xc7, [@generic={0x19, 0x10, "fad6cd68e459b17a79f4d495fb729006ec0d434c2ee0a4"}, @generic={0xe2, 0x21, "9b8734e232f144e7fd50c54a06bebf7a3dbc1ea818560ff505f20d6a544cadff54dbb5e5ffba4c23045620d528cbbe51be4792efd9dfa53a9ab41987c93f7071e0a185de0ea730027c80b9316581d023430d351c8735b8dd31dab3aacdf9e912eaae6a04c52cb4ab2b80c5cc108fa2fc516a4cb4fc639109ecc559ff1b77a2f8a3bd125eac0b1ae760f1ef5df836e6d2a89f2fac63b77affcdbaa2f9ac15e86e5f5604039771b065b1e3459b6ccd62661b26682f9d6500363a6f1db88841397eabfc17c47fdc17772b72c7d1832eb28ceb5f9c590389dae6a9643828bad3dffb"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x5, 0x42, 0x97, 0x8c, 0x97, [], [{{0x9, 0x5, 0x1, 0x1, 0xa52af29b1fd2f744, 0xfa, 0x1, 0x80, [@generic={0x6a, 0x22, "d0b853c36aa0121a63a19c4850495db2eb8cf2750e8f8fae3ca258e0e152cdefaa890fc138510742805e3c3319ab5761282b2b46a6e1e9256fb72796854521b41d31f592a86422edde131b3da8ad2111d8f767a793c8605f3bfe371a255cc3739a1b95e98f8773b0"}, @generic={0x9e, 0x11, "82b408aa018d53f39b48458622dbaff27aa61b16d632a22d617a9554f154f5698622a0ff6c13db04dddd85019e116bee9732ef082051b9a9b210d374cb6dd88bfbf26fab036340b4a2237adae2a72adc2ea30c270090f96f3058435f46be7670f407bec702b0de614ff4179a89fe87fd5fa9c96b9391499d24cff736591cd3c1f88ae4c8c89f6e94e145886aacc3a9f3237bcffcb6e8829b62c637a9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x0, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3f}]}}, {{0x9, 0x5, 0xb, 0x3, 0x80, 0x0, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x7f, 0xf8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1}, @generic={0x67, 0x11, "8ff84075baaa52799a1972d1515c071deb652758fb523507a07afcaf5272b6fd443fbc3096703d2c4c50915019782306ed44b36d96aa92b5e693c26b9ff79abc9c58d5516f713612c0553cb0259cd791a3b1e80212547dfe3c0aa189ba1266e4c0eae904d9"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x20, 0x5, 0x0, 0xff, 0x7}, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f1600020a1003960100a001040007100208cccbb3"], 0x1, [{0xfc, &(0x7f0000000900)=@string={0xfc, 0x3, "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"}}]}) 01:00:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@rand_addr, @loopback, 0x0, 0xff, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'macvlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 'virt_wifi0\x00', 'lo\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'bond_slave_1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@remote, @remote, @remote}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) 01:00:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 01:00:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:00:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x1c000, 0x0) [ 560.409609][ T9795] usb 6-1: string descriptor 0 read error: -71 [ 560.419737][ T9795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 560.477193][ T9795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.489469][ T9841] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 560.492652][T18052] x_tables: duplicate underflow at hook 1 [ 560.561034][ T9795] usb 6-1: can't set config #1, error -71 01:00:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x25) read$char_usb(r0, &(0x7f0000000000)=""/238, 0xee) [ 560.626428][ T9795] usb 6-1: USB disconnect, device number 21 01:00:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) open(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:00:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x1c000, 0x0) 01:00:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'macvlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'virt_wifi0\x00', 'lo\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'bond_slave_1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@remote, @remote, @remote}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 560.759573][ T9841] usb 3-1: Using ep0 maxpacket: 8 [ 560.880618][ T9841] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 01:00:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlockall(0x1) r1 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee00, r1}, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xca200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) read$usbfs(0xffffffffffffffff, &(0x7f0000000040)=""/47, 0x2f) prctl$PR_SET_FPEMU(0xa, 0x1) [ 560.996346][T18080] x_tables: duplicate underflow at hook 1 [ 561.040490][ T9795] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 561.089745][ T9841] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 561.108318][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.146256][ T9841] usb 3-1: Product: syz [ 561.159543][ T9841] usb 3-1: Manufacturer: syz [ 561.171043][ T9841] usb 3-1: SerialNumber: syz [ 561.198932][ T9841] usb 3-1: config 0 descriptor?? [ 561.279730][ T9795] usb 6-1: Using ep0 maxpacket: 8 01:00:52 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x98, 0xfb, 0x0, [], [{{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 01:00:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x1c000, 0x0) [ 561.306212][ T9841] usb 3-1: USB disconnect, device number 29 [ 561.399839][ T9795] usb 6-1: config 0 has an invalid interface number: 163 but max is 2 [ 561.419146][ T9795] usb 6-1: config 0 has an invalid interface number: 133 but max is 2 [ 561.456825][ T9795] usb 6-1: config 0 has no interface number 1 [ 561.479435][ T9795] usb 6-1: config 0 has no interface number 2 [ 561.501434][ T9795] usb 6-1: config 0 interface 163 altsetting 63 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 561.545164][ T9795] usb 6-1: config 0 interface 163 altsetting 63 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 561.598713][ T9795] usb 6-1: config 0 interface 163 altsetting 63 has a duplicate endpoint with address 0x4, skipping [ 561.663718][ T9795] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x4, skipping [ 561.729470][ T9795] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 561.782926][ T9795] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 561.829426][ T9795] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x4, skipping [ 561.856544][ T9795] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x5, skipping [ 561.879450][ T9841] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 561.890387][ T9795] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 561.903671][ T9795] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 561.918113][ T9795] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 561.945672][ T9795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 561.969587][ T9795] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 561.993391][ T9795] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 562.022744][ T9795] usb 6-1: config 0 interface 163 has no altsetting 0 [ 562.059444][ T9795] usb 6-1: config 0 interface 133 has no altsetting 0 [ 562.179424][ T9841] usb 3-1: Using ep0 maxpacket: 8 [ 562.249536][ T9795] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 562.258708][ T9795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.297977][ T9795] usb 6-1: Product: syz [ 562.303531][ T9795] usb 6-1: Manufacturer: syz [ 562.319860][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 562.329646][ T9795] usb 6-1: SerialNumber: syz [ 562.340870][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 562.354898][ T9795] usb 6-1: config 0 descriptor?? [ 562.385546][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 562.578007][ T9841] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 562.611175][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.669442][ T9841] usb 3-1: Product: syz [ 562.682449][ T9841] usb 3-1: Manufacturer: syz [ 562.687103][ T9841] usb 3-1: SerialNumber: syz [ 562.730300][ T9841] usb 3-1: config 0 descriptor?? [ 562.819758][ T9795] usb 6-1: USB disconnect, device number 22 [ 562.997009][ T9784] usb 3-1: USB disconnect, device number 30 [ 563.438436][T17100] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 563.699624][T17100] usb 6-1: Using ep0 maxpacket: 8 [ 563.769381][ T9841] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 563.819594][T17100] usb 6-1: config 0 has an invalid interface number: 163 but max is 2 [ 563.827820][T17100] usb 6-1: config 0 has an invalid interface number: 133 but max is 2 [ 563.838974][T17100] usb 6-1: config 0 has no interface number 1 [ 563.847196][T17100] usb 6-1: config 0 has no interface number 2 [ 563.855316][T17100] usb 6-1: config 0 interface 163 altsetting 63 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 563.867779][T17100] usb 6-1: config 0 interface 163 altsetting 63 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 563.886202][T17100] usb 6-1: config 0 interface 163 altsetting 63 has a duplicate endpoint with address 0x4, skipping [ 563.898799][T17100] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x4, skipping [ 563.911954][T17100] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 563.925658][T17100] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 563.938228][T17100] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x4, skipping [ 563.951118][T17100] usb 6-1: config 0 interface 133 altsetting 31 has a duplicate endpoint with address 0x5, skipping [ 563.963407][T17100] usb 6-1: config 0 interface 133 altsetting 31 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 563.978150][T17100] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 563.991357][T17100] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 564.004053][T17100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 564.016370][T17100] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 564.028747][ T9841] usb 3-1: Using ep0 maxpacket: 8 [ 564.033990][T17100] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 564.047295][T17100] usb 6-1: config 0 interface 163 has no altsetting 0 [ 564.056086][T17100] usb 6-1: config 0 interface 133 has no altsetting 0 01:00:54 executing program 5: socketpair(0x10, 0x0, 0x100, &(0x7f0000000140)) 01:00:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x1c000, 0x0) 01:00:54 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 01:00:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) open(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:00:54 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4000, 0x0) [ 564.149675][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 564.161538][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 564.175438][ T9841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 564.299417][T17100] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 564.327880][T17100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:00:55 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x77359400}, 0x0) [ 564.379723][ T9841] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 564.397541][T17100] usb 6-1: config 0 descriptor?? [ 564.417222][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:00:55 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x13, 0xb6, 0xc, 0x10, 0x1fb9, 0x602, 0x822f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd0, 0xb9, 0x6a, 0x0, [], [{}]}}]}}]}}, 0x0) 01:00:55 executing program 2: socket$inet6(0xa, 0x180805, 0x0) [ 564.479758][T17100] usb 6-1: can't set config #0, error -71 [ 564.493201][ T9841] usb 3-1: Product: syz [ 564.517543][T17100] usb 6-1: USB disconnect, device number 23 01:00:55 executing program 5: capget(&(0x7f0000000140)={0x20071026}, 0x0) [ 564.549905][ T9841] usb 3-1: Manufacturer: syz [ 564.569704][ T9841] usb 3-1: SerialNumber: syz [ 564.604391][ T9841] usb 3-1: config 0 descriptor?? 01:00:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0xfcc3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 564.629972][ T9841] usb 3-1: can't set config #0, error -71 [ 564.657517][ T9841] usb 3-1: USB disconnect, device number 31 01:00:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8da}]}) 01:00:55 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x20600, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)=ANY=[], 0x21) ftruncate(r0, 0x2081fc) r2 = open(&(0x7f00000007c0)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18}, 0x18) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) dup2(r1, r0) [ 565.069547][ T36] audit: type=1804 audit(1609462855.832:12): pid=18204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 [ 565.109325][ T9795] usb 2-1: new high-speed USB device number 93 using dummy_hcd 01:00:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0xfcc3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 01:00:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0xfce3) [ 565.180823][ T36] audit: type=1804 audit(1609462855.882:13): pid=18204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 01:00:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) open(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:00:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 565.336850][ T36] audit: type=1804 audit(1609462855.912:14): pid=18204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 [ 565.370361][ T9795] usb 2-1: Using ep0 maxpacket: 16 01:00:56 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setuid(0xee00) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 565.460579][ T36] audit: type=1804 audit(1609462855.942:15): pid=18204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 [ 565.499573][ T9795] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 565.667561][ T36] audit: type=1804 audit(1609462855.952:16): pid=18205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 01:00:56 executing program 0: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r0}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000002c0)={0x6}, 0x4) [ 565.749723][ T9795] usb 2-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 565.777481][ T9795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.839032][ T9795] usb 2-1: Product: syz [ 565.879613][ T9795] usb 2-1: Manufacturer: syz [ 565.884379][ T36] audit: type=1804 audit(1609462855.982:17): pid=18206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir536440434/syzkaller.qzqMWa/267/bus" dev="sda1" ino=16081 res=1 errno=0 [ 565.911305][ T9795] usb 2-1: SerialNumber: syz [ 565.918311][ T9795] usb 2-1: config 0 descriptor?? [ 565.971063][ T9795] cp210x 2-1:0.0: cp210x converter detected [ 566.189363][ T9795] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 566.202817][ T9795] cp210x 2-1:0.0: querying part number failed [ 566.235404][ T9795] usb 2-1: cp210x converter now attached to ttyUSB0 [ 566.258109][ T9795] usb 2-1: USB disconnect, device number 93 [ 566.289827][ T9795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 566.302224][ T9795] cp210x 2-1:0.0: device disconnected [ 566.969403][T17100] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 567.219148][T17100] usb 2-1: Using ep0 maxpacket: 16 [ 567.339518][T17100] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 567.509271][T17100] usb 2-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 567.518697][T17100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.529674][T17100] usb 2-1: Product: syz [ 567.533915][T17100] usb 2-1: Manufacturer: syz [ 567.538519][T17100] usb 2-1: SerialNumber: syz [ 567.548266][T17100] usb 2-1: config 0 descriptor?? [ 567.600433][T17100] cp210x 2-1:0.0: cp210x converter detected 01:00:58 executing program 1: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) 01:00:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) open(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:00:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a", 0x1f, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 01:00:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x218}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 01:00:58 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) 01:00:58 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) [ 567.769204][T17100] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 567.776775][T17100] cp210x 2-1:0.0: querying part number failed [ 567.826818][T17100] usb 2-1: cp210x converter now attached to ttyUSB0 [ 567.876592][T17100] usb 2-1: USB disconnect, device number 94 [ 567.892936][T18285] loop4: detected capacity change from 4096 to 0 [ 567.952199][T17100] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 567.974449][ T36] audit: type=1804 audit(1609462858.742:18): pid=18290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir731089290/syzkaller.Ci8gP8/210/bus/file0" dev="overlay" ino=16379 res=1 errno=0 [ 568.032319][T18297] overlayfs: './file0' not a directory 01:00:58 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) [ 568.075690][T17100] cp210x 2-1:0.0: device disconnected 01:00:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x218}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 568.128818][T18285] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 568.289256][ T9741] usb 6-1: new high-speed USB device number 24 using dummy_hcd 01:00:59 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10}}}}}]}}]}}, 0x0) 01:00:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x679}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x1154}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 01:00:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x218}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 01:00:59 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5c, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x32}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0xff, 0x9, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) [ 568.729435][ T9741] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:00:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x21, 0x0, [0x482, 0x0, 0x80000021, 0x0, 0xc001001b]}) 01:00:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010010, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x218}], 0x1, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 568.839151][ T36] audit: type=1804 audit(1609462859.602:19): pid=18323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir731089290/syzkaller.Ci8gP8/211/bus/file0" dev="overlay" ino=16002 res=1 errno=0 [ 568.849076][ T9841] usb 5-1: new high-speed USB device number 13 using dummy_hcd 01:00:59 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) [ 568.950117][ T9741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 568.975266][ T9741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.007448][ T9741] usb 6-1: Product: syz [ 569.025672][ T9741] usb 6-1: Manufacturer: syz [ 569.048786][ T9741] usb 6-1: SerialNumber: syz [ 569.069279][T17100] usb 2-1: new high-speed USB device number 95 using dummy_hcd 01:00:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x21, 0x0, [0x482, 0x0, 0x80000021, 0x0, 0xc001001b]}) 01:01:00 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "3598"}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x32}}}}}}}]}}, 0x0) [ 569.279438][ T9841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 569.327055][ T36] audit: type=1804 audit(1609462860.092:20): pid=18349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir731089290/syzkaller.Ci8gP8/212/bus/file0" dev="overlay" ino=16051 res=1 errno=0 [ 569.335075][ T9741] usb 6-1: USB disconnect, device number 24 [ 569.449650][T17100] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 569.468117][T17100] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 569.483294][ T9841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 569.510897][ T9841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.531942][T17100] usb 2-1: config 1 interface 1 has no altsetting 0 [ 569.541237][ T9841] usb 5-1: Product: syz [ 569.551931][ T9841] usb 5-1: Manufacturer: syz [ 569.574417][ T9841] usb 5-1: SerialNumber: syz [ 569.581864][ T9320] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 569.610207][T18320] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 569.719336][T17100] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.728775][T17100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.741200][T17100] usb 2-1: Product: syz [ 569.745399][T17100] usb 2-1: Manufacturer: syz [ 569.754626][T17100] usb 2-1: SerialNumber: syz [ 569.836284][ T9841] usb 5-1: USB disconnect, device number 13 [ 569.949211][ T9320] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 569.960773][ T9320] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 569.975333][ T9320] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 569.989747][ T9320] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.132570][T17100] usb 2-1: USB disconnect, device number 95 [ 570.158511][ T9741] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 570.166932][ T9320] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.180856][ T9320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.196447][ T9320] usb 1-1: Product: syz [ 570.202779][ T9320] usb 1-1: Manufacturer: syz [ 570.211954][ T9320] usb 1-1: SerialNumber: syz [ 570.578396][ T9320] usb 1-1: USB disconnect, device number 23 [ 570.609657][ T9741] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 570.622809][ T9841] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 570.849184][ T20] usb 2-1: new high-speed USB device number 96 using dummy_hcd 01:01:01 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 01:01:01 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) 01:01:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x21, 0x0, [0x482, 0x0, 0x80000021, 0x0, 0xc001001b]}) [ 570.969381][ T9741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 570.996686][ T9741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.019327][ T9841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 571.062822][ T9741] usb 6-1: Product: syz [ 571.119598][ T9741] usb 6-1: can't set config #1, error -71 [ 571.169556][ T9741] usb 6-1: USB disconnect, device number 25 [ 571.175968][T18440] overlayfs: failed to resolve './bus': -2 [ 571.202860][ T36] audit: type=1804 audit(1609462861.972:21): pid=18448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir731089290/syzkaller.Ci8gP8/213/bus/file0" dev="sda1" ino=16115 res=1 errno=0 [ 571.239288][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 571.248909][ T9841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 571.257992][ T9841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.266692][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 571.294000][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 571.321347][ T9841] usb 5-1: Product: syz [ 571.333787][ T20] usb 2-1: config 1 interface 1 has no altsetting 0 [ 571.384022][ T9841] usb 5-1: Manufacturer: syz [ 571.406044][ T9841] usb 5-1: SerialNumber: syz [ 571.480691][T18320] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 571.579331][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.588421][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:02 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 01:01:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 01:01:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x21, 0x0, [0x482, 0x0, 0x80000021, 0x0, 0xc001001b]}) [ 571.619502][ T20] usb 2-1: Product: syz [ 571.619508][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 571.619545][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 571.623767][ T20] usb 2-1: Manufacturer: syz [ 571.656842][ T9741] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 571.690530][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.708743][ T20] usb 2-1: SerialNumber: syz [ 571.724050][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 01:01:02 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5c, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x32}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0xff, 0x9, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) [ 571.781489][ T9350] usb 5-1: USB disconnect, device number 14 01:01:02 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x13, 0xb6, 0xc, 0x10, 0x1fb9, 0x602, 0x822f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd0, 0xb9, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) [ 571.839212][ T20] usb 2-1: can't set config #1, error -71 [ 571.880577][ T20] usb 2-1: USB disconnect, device number 96 [ 571.929906][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.957895][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.997986][ T7] usb 1-1: Product: syz [ 572.004561][ T7] usb 1-1: Manufacturer: syz [ 572.011604][ T7] usb 1-1: SerialNumber: syz 01:01:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f00000031c0)=ANY=[], 0xed0, 0x0) 01:01:02 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) [ 572.079275][ T9741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 572.117315][T18486] loop4: detected capacity change from 512 to 0 [ 572.159419][ T9741] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 572.178547][T18486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.249281][ T9841] usb 3-1: new high-speed USB device number 32 using dummy_hcd 01:01:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 01:01:03 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) write$evdev(r0, &(0x7f0000000180)=[{}], 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x808001) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000440)=""/4096, 0x1000) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_bridge\x00', {0x2}, 0x8}) [ 572.329429][ T9741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 572.346017][ T9741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.369434][ T9741] usb 6-1: Product: syz [ 572.376861][ T9741] usb 6-1: Manufacturer: syz [ 572.382775][ T20] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 572.399189][ T9741] usb 6-1: SerialNumber: syz [ 572.411067][ T9320] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 572.457279][ T7] usb 1-1: USB disconnect, device number 24 [ 572.489264][ T9841] usb 3-1: Using ep0 maxpacket: 16 [ 572.609523][ T9841] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 572.618398][ T9841] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 572.649395][ T9784] usb 6-1: USB disconnect, device number 26 [ 572.762695][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 572.779186][ T9320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.790823][ T9320] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.802113][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 572.812548][ T9320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.825896][ T20] usb 2-1: config 1 interface 1 has no altsetting 0 [ 572.832944][ T9841] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f [ 572.844078][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.854745][ T9841] usb 3-1: Product: syz [ 572.861190][ T9841] usb 3-1: Manufacturer: syz [ 572.865847][ T9841] usb 3-1: SerialNumber: syz [ 572.878340][ T9841] usb 3-1: config 0 descriptor?? [ 572.930930][ T9841] cp210x 3-1:0.0: cp210x converter detected [ 573.009453][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.018548][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.030213][ T9320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 573.049231][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.057308][ T9320] usb 4-1: Product: syz [ 573.068925][ T20] usb 2-1: Product: syz [ 573.073202][ T20] usb 2-1: Manufacturer: syz [ 573.077824][ T20] usb 2-1: SerialNumber: syz [ 573.090365][ T9320] usb 4-1: Manufacturer: syz [ 573.095061][ T9320] usb 4-1: SerialNumber: syz [ 573.149136][ T9841] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 573.166486][ T9841] cp210x 3-1:0.0: querying part number failed [ 573.197052][ T9841] usb 3-1: cp210x converter now attached to ttyUSB0 [ 573.215695][ T9841] usb 3-1: USB disconnect, device number 32 [ 573.231620][ T9841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 573.243266][ T9841] cp210x 3-1:0.0: device disconnected [ 573.366944][ T9320] usb 4-1: USB disconnect, device number 8 [ 573.429380][ T9784] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 573.508711][ T20] usb 2-1: USB disconnect, device number 97 [ 573.849170][ T9784] usb 6-1: unable to get BOS descriptor or descriptor too short [ 573.912041][ T9320] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 573.949450][ T9784] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:01:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup2(r4, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:01:04 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) 01:01:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 01:01:04 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5c, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x32}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0xff, 0x9, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) [ 574.118953][ T9784] usb 6-1: string descriptor 0 read error: -71 [ 574.126702][ T9784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 574.138987][ T20] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 574.159879][ T9320] usb 3-1: Using ep0 maxpacket: 16 [ 574.172358][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) [ 574.229294][ T9784] usb 6-1: can't set config #1, error -71 [ 574.242760][ T9784] usb 6-1: USB disconnect, device number 27 [ 574.279931][ T9320] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 574.288714][ T9320] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 574.469200][ T9795] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 574.492005][ T8604] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 574.500620][ T9320] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0602, bcdDevice=82.2f 01:01:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) [ 574.510563][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 574.557852][ T9320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.568662][ T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 574.583726][ T9320] usb 3-1: Product: syz [ 574.587953][ T9320] usb 3-1: Manufacturer: syz [ 574.608796][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.624420][ T9320] usb 3-1: SerialNumber: syz [ 574.641401][ T9320] usb 3-1: config 0 descriptor?? [ 574.682636][ T9320] cp210x 3-1:0.0: cp210x converter detected 01:01:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup2(r4, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 574.809729][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 574.827396][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.866284][ T20] usb 4-1: Product: syz [ 574.878026][ T20] usb 4-1: Manufacturer: syz [ 574.889163][ T9320] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 574.896722][ T9320] cp210x 3-1:0.0: querying part number failed [ 574.903514][ T8604] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 574.935811][ T20] usb 4-1: SerialNumber: syz [ 574.941824][ T8604] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 574.967929][ T9320] usb 3-1: cp210x converter now attached to ttyUSB0 01:01:05 executing program 2: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x8840}, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000740)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x4, 'sh\x00', 0x0, 0x2a19b24b, 0x62}, 0x2c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r2) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000009c0)={{r3}, 0x0, 0x16, @unused=[0xffffffffffffffc1, 0x0, 0x0, 0x5], @devid}) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:01:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r3, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 574.979276][ T9795] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 574.987580][ T8604] usb 2-1: config 1 interface 1 has no altsetting 0 [ 575.007271][ T9320] usb 3-1: USB disconnect, device number 33 [ 575.036099][ T9320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 575.056437][ T9320] cp210x 3-1:0.0: device disconnected [ 575.159356][ T8604] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.177882][ T8604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:06 executing program 3: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "3598"}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) 01:01:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup2(r4, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 575.216497][ T8604] usb 2-1: Product: syz [ 575.226428][ T8604] usb 2-1: Manufacturer: syz [ 575.239236][ T9795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 575.243338][ T8604] usb 2-1: SerialNumber: syz [ 575.264512][ T9795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.276617][ T9320] usb 4-1: USB disconnect, device number 9 [ 575.303981][ T9795] usb 5-1: Product: syz [ 575.323876][ T9795] usb 5-1: Manufacturer: syz [ 575.362888][ T9795] usb 5-1: SerialNumber: syz 01:01:06 executing program 0: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:01:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x97, 0x4000000000dc) [ 575.630525][ T8604] usb 2-1: USB disconnect, device number 98 [ 575.675178][ T9741] usb 5-1: USB disconnect, device number 15 [ 575.819018][ T9320] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 575.819082][ T9795] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 576.179534][ T9320] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.210670][ T9320] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.249247][ T9795] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.258895][ T9320] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.272499][ T9795] usb 1-1: config 1 interface 1 has no altsetting 0 [ 576.438821][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 576.449338][ T9795] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.449633][ T9320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.458416][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.522555][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.549869][ T9320] usb 4-1: Product: syz [ 576.554086][ T9320] usb 4-1: Manufacturer: syz [ 576.566714][ T9795] usb 1-1: Product: syz [ 576.577525][ T9795] usb 1-1: Manufacturer: syz [ 576.589723][ T9795] usb 1-1: SerialNumber: syz [ 576.606894][ T9320] usb 4-1: SerialNumber: syz [ 576.959437][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 576.981363][ T9320] usb 4-1: USB disconnect, device number 10 [ 577.069491][ T9795] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 577.139363][ T9795] usb 1-1: USB disconnect, device number 25 01:01:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup2(r4, r0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:01:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 01:01:08 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5c, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x32}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0xff, 0x9, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) 01:01:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup2(r3, r0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 577.299254][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 577.311266][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.347762][ T7] usb 5-1: Product: syz 01:01:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r4, 0x2008002) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x201002) [ 577.421637][ T7] usb 5-1: can't set config #1, error -71 [ 577.445033][ T7] usb 5-1: USB disconnect, device number 16 01:01:08 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, 0x0) [ 577.619273][ T9320] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 577.648814][ T8604] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 577.684596][ T36] audit: type=1800 audit(1609462868.452:22): pid=18791 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15989 res=0 errno=0 01:01:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000100)) [ 577.778920][ T9795] usb 1-1: new high-speed USB device number 26 using dummy_hcd 01:01:08 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0x68, 0xde, 0x8, 0x763, 0x2001, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0xff, 0x98, 0xfb}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x97, 0x8c}}]}}]}}, 0x0) [ 577.998960][ T9320] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 578.034701][ T9320] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.044748][ T9320] usb 2-1: config 1 interface 1 has no altsetting 0 [ 578.089325][ T8604] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 578.108424][ T8604] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.127273][ T8604] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.179719][ T9795] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.197877][ T9795] usb 1-1: config 1 interface 1 has no altsetting 0 [ 578.219111][ T9320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.228227][ T9320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.236975][ T9320] usb 2-1: Product: syz [ 578.241959][ T9320] usb 2-1: Manufacturer: syz [ 578.246624][ T9320] usb 2-1: SerialNumber: syz [ 578.248922][ T7] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 578.312279][ T8604] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.329067][ T8604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.353548][ T8604] usb 4-1: Product: syz [ 578.364299][ T8604] usb 4-1: Manufacturer: syz [ 578.377656][ T8604] usb 4-1: SerialNumber: syz [ 578.398936][ T9795] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.408051][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.423360][ T9795] usb 1-1: Product: syz [ 578.427567][ T9795] usb 1-1: Manufacturer: syz [ 578.434758][ T9795] usb 1-1: SerialNumber: syz [ 578.458961][ T8604] usb 4-1: can't set config #1, error -71 [ 578.475399][ T8604] usb 4-1: USB disconnect, device number 11 01:01:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x7fff}]}) 01:01:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) [ 578.494343][ T36] audit: type=1800 audit(1609462869.262:23): pid=18819 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15989 res=0 errno=0 01:01:09 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) [ 578.549001][ T7] usb 6-1: Using ep0 maxpacket: 8 01:01:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r0, r0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000097b000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 578.569528][ T9795] usb 1-1: can't set config #1, error -71 [ 578.599547][ T9795] usb 1-1: USB disconnect, device number 26 [ 578.633867][ T9320] usb 2-1: USB disconnect, device number 99 01:01:09 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) [ 578.689177][ T7] usb 6-1: config 0 has an invalid interface number: 163 but max is 1 [ 578.708494][ T7] usb 6-1: config 0 has no interface number 1 01:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x25) read$char_usb(r0, 0x0, 0x0) [ 578.919136][ T7] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 578.941646][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.989257][ T7] usb 6-1: Product: syz [ 578.993499][ T7] usb 6-1: Manufacturer: syz [ 578.998125][ T7] usb 6-1: SerialNumber: syz [ 579.036108][ T7] usb 6-1: config 0 descriptor?? 01:01:09 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 01:01:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 01:01:10 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @input_terminal={0xc}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "3598"}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:01:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r0, 0x8000000) [ 579.297263][ T9795] usb 6-1: USB disconnect, device number 28 01:01:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x1154}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 579.568761][ T9784] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 579.638784][ T9320] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 579.949465][ T9784] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 579.999675][ T9320] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.017167][ T9320] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.063812][ T9320] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 580.079741][ T9795] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 580.146894][ T9784] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.199301][ T9784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.249899][ T9784] usb 4-1: Product: syz [ 580.299164][ T9320] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.305265][ T9784] usb 4-1: Manufacturer: syz [ 580.308364][ T9320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.308397][ T9320] usb 1-1: Product: syz [ 580.308418][ T9320] usb 1-1: Manufacturer: syz [ 580.328601][ T9795] usb 6-1: Using ep0 maxpacket: 8 [ 580.379815][ T9784] usb 4-1: SerialNumber: syz [ 580.449144][ T9795] usb 6-1: config 0 has an invalid interface number: 163 but max is 1 [ 580.487070][ T9320] usb 1-1: SerialNumber: syz [ 580.505952][ T9795] usb 6-1: config 0 has no interface number 1 [ 580.682197][ T8604] usb 4-1: USB disconnect, device number 12 [ 580.764367][ T9795] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=d3.b1 [ 580.793374][ T9795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.818553][ T9795] usb 6-1: Product: syz [ 580.822783][ T9795] usb 6-1: Manufacturer: syz [ 580.827375][ T9795] usb 6-1: SerialNumber: syz [ 580.842182][ T9795] usb 6-1: config 0 descriptor?? [ 580.899720][ T9320] usb 1-1: USB disconnect, device number 27 01:01:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x1302, 0x4000000000dc) 01:01:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 01:01:11 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f0000001400)) 01:01:11 executing program 1: r0 = getpgrp(0xffffffffffffffff) pidfd_open(r0, 0x0) [ 581.017404][ T8604] usb 6-1: USB disconnect, device number 29 01:01:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001eb, 0x4000884) syz_80211_inject_frame(0x0, 0x0, 0x1c) 01:01:12 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) fsmount(r0, 0x0, 0x0) 01:01:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 581.459188][T17100] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 581.558739][ T20] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 581.670536][T18985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.830087][T17100] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 581.928932][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.949205][ T20] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.966350][ T20] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.019511][T17100] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 582.036738][T17100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.087291][T17100] usb 4-1: Product: syz [ 582.114018][T17100] usb 4-1: Manufacturer: syz [ 582.136090][T17100] usb 4-1: SerialNumber: syz [ 582.149270][ T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.174057][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:13 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>']) 01:01:13 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f0000001400)) [ 582.220543][ T20] usb 1-1: Product: syz [ 582.232568][ T20] usb 1-1: Manufacturer: syz [ 582.260247][ T20] usb 1-1: SerialNumber: syz [ 582.270907][T17100] usb 4-1: can't set config #1, error -71 [ 582.311770][T17100] usb 4-1: USB disconnect, device number 13 01:01:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 01:01:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 01:01:13 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 582.378792][ T20] usb 1-1: can't set config #1, error -71 [ 582.400320][ T20] usb 1-1: USB disconnect, device number 28 01:01:13 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000001940)) 01:01:13 executing program 1: io_uring_setup(0x5f02, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x389}) [ 582.595223][T19018] overlayfs: failed to resolve './bus': -2 [ 582.605991][ T36] audit: type=1804 audit(1609462873.372:24): pid=19024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237144635/syzkaller.OPrrhs/273/bus/file0" dev="sda1" ino=16291 res=1 errno=0 01:01:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000000c0)=0x10) 01:01:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 582.727689][ T36] audit: type=1804 audit(1609462873.432:25): pid=19024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237144635/syzkaller.OPrrhs/273/bus/file0" dev="sda1" ino=16291 res=1 errno=0 01:01:13 executing program 3: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) getrusage(0x0, &(0x7f0000000000)) 01:01:13 executing program 5: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x105000, 0x0) [ 582.778579][ T8604] usb 3-1: new high-speed USB device number 34 using dummy_hcd 01:01:13 executing program 1: r0 = fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='%!\xd4*\x00', &(0x7f00000001c0)='batadv_slave_0\x00', 0x0) 01:01:13 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x101000) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x40000) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000300)={0x0, 0x0, 0x33a9, 0xad5, 0x0, 0x9}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) 01:01:13 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0xf1) 01:01:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) [ 583.169878][ T8604] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:01:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000140)) [ 583.418844][ T8604] usb 3-1: string descriptor 0 read error: -22 [ 583.425166][ T8604] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 583.452919][ T8604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.727762][ T8604] usb 3-1: USB disconnect, device number 34 [ 584.508572][ T9784] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 584.919146][ T9784] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 585.218646][ T9784] usb 3-1: string descriptor 0 read error: -22 [ 585.225039][ T9784] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 585.237601][ T9784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:16 executing program 2: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 01:01:16 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10}, 0x10}}, 0x0) 01:01:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 01:01:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) 01:01:16 executing program 5: socketpair(0x1e, 0x0, 0x80, &(0x7f00000016c0)) 01:01:16 executing program 3: io_uring_setup(0x6d3f, &(0x7f00000000c0)) [ 585.416092][ T9784] usb 3-1: USB disconnect, device number 35 01:01:16 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) 01:01:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000840), 0x4) 01:01:16 executing program 1: syz_io_uring_setup(0x650b, &(0x7f0000000380), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 01:01:16 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 01:01:16 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000280)=""/252, 0xfc) 01:01:16 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) 01:01:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 01:01:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000003900)=0xb6) 01:01:16 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000001c0)) 01:01:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 01:01:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) 01:01:16 executing program 0: socketpair(0x1d, 0x0, 0x9461, &(0x7f00000016c0)) 01:01:17 executing program 1: kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:01:17 executing program 3: getrusage(0x0, &(0x7f0000000d40)) 01:01:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='\x00', &(0x7f0000000240)='I', 0x1) 01:01:17 executing program 5: socketpair(0x1a, 0x0, 0x0, &(0x7f00000016c0)) 01:01:17 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x56f05fff]}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 01:01:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 01:01:17 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 01:01:17 executing program 4: syz_io_uring_setup(0x7e99, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:01:17 executing program 3: syz_io_uring_setup(0x3b64, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:01:17 executing program 5: clock_getres(0x6, &(0x7f0000000080)) 01:01:17 executing program 2: r0 = epoll_create1(0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000880)) 01:01:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 01:01:17 executing program 1: io_uring_setup(0x1727, &(0x7f00000014c0)={0x0, 0x0, 0x2}) 01:01:17 executing program 4: syz_io_uring_setup(0x12e, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) 01:01:17 executing program 3: bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) 01:01:17 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101000, 0x0) 01:01:17 executing program 2: io_uring_setup(0x3bc3, &(0x7f00000003c0)={0x0, 0x95c, 0x19}) 01:01:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080), &(0x7f0000000040)=0x10) 01:01:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) 01:01:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 01:01:18 executing program 3: fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x0) 01:01:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x90) 01:01:18 executing program 0: select(0x40, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)={0x6}, &(0x7f0000002ac0)={0x0, 0xea60}) 01:01:18 executing program 2: process_vm_readv(0x0, &(0x7f00000076c0)=[{&(0x7f00000066c0)=""/4096, 0x1000}], 0x1, &(0x7f0000007800)=[{&(0x7f0000007700)=""/126, 0x7e}, {0x0}], 0x2, 0x0) 01:01:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 01:01:18 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:18 executing program 5: socketpair(0x23, 0x0, 0x9, &(0x7f0000000400)) 01:01:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000003900)=0xb6) 01:01:18 executing program 1: syz_io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0xd62, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) 01:01:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 01:01:18 executing program 0: io_uring_setup(0x0, &(0x7f00000000c0)) [ 587.641414][T19220] loop4: detected capacity change from 272 to 0 [ 587.705055][T19220] minix_free_inode: bit 2 already cleared 01:01:18 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:18 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x73, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x80, 0xf46f}, @mdlm={0x15}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x7, 0x8c}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x20, 0x5, 0x1, 0x10, 0x1}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "cf0808376b5637b35d37afb8b1111eebf536903c0df19a4dfbb67e0642d15882d7ef9dd8b5fdc03c18dce5bcb4533f850489d92c0a972305ba1e99a7786ef16ae073b922ece4c5ccd841ae308bcbb9cc91d8cbd21ac5274027325161cc3e756f9b51313ec322e316198f52c22b637afb6a8859d7b98f27ca79d504ccb450bc6e22cae2399158de1b1aa6f47627c5c3c7783adf2c9a56c42d430bde3e2f3b05640c76593b3d562f2e48c28d45f23f00f42031744e5d4ab3b4d9ac37acd2ddde41e45eeb377cc2f18b0ed6"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "f229e9806faa27c1e3c4bc3da9d0116aff38b83d707bf44b20596087adde193adf16f111c4c955379bba34399768b4965411f744005e44f085779ffef6d8ed30822cc3935e2bd03930ef6d1b22109c3d780a9be4bc877c33e14f0e7d05332e41d006b4eed699c40b187067184b708da9f269dcec9b476e73f7bee1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}, {0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "ab2404238c6051a2a6541c696d875633ccc79fa26e924b8b60833078c6c0fcbd91db8015d37c56f96470b219b6349c0e4420af2bff1efb1b768a560d4c6d2e3f7cce65ae53740a2d74f767ef00e720466541c2a7c4c6c13b7edea499a4a7952acd9cc5ec5933a07a14ca493f77f82bda429f33f1ce5bae83cb156e1dea87c56779bae13215ac7f520a1a2edb41cb8edda53e484c17a037befcb64a8a79fa99a9942506ced5297b17c09446753eca167cfc2e162d3e5a6e61ef49c7830311bf613938a4639ee99a2a87c113e027"}}, {0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="039486507d282e87da1a84eb7e8f93fda8c75f5cefb4ea0e9221dee53b1347077649e2f99724ee8b8d8e9c564a8d8d16da0e239d0c61b2ccea7cfa6b41894a08bc42f018c3f08daf98ef69a8"]}]}) 01:01:18 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 01:01:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000080)=0x10) 01:01:18 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) 01:01:18 executing program 2: syz_open_dev$audion(0x0, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) [ 588.009583][T19246] loop4: detected capacity change from 272 to 0 [ 588.070575][T19246] minix_free_inode: bit 2 already cleared 01:01:19 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:19 executing program 2: fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) [ 588.269324][ T9784] usb 6-1: new high-speed USB device number 30 using dummy_hcd 01:01:19 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 01:01:19 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f00000016c0)) [ 588.528446][ T9784] usb 6-1: Using ep0 maxpacket: 8 [ 588.533609][T19264] loop4: detected capacity change from 272 to 0 01:01:19 executing program 0: r0 = fsopen(&(0x7f0000000280)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) [ 588.602698][T19264] minix_free_inode: bit 2 already cleared [ 588.648836][ T9784] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 588.690523][ T9784] usb 6-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 01:01:19 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 588.758594][ T8604] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 588.772510][ T9784] usb 6-1: config 1 interface 0 has no altsetting 0 01:01:19 executing program 2: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) [ 588.968698][ T9784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.983748][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.998370][ T8604] usb 2-1: Using ep0 maxpacket: 8 [ 589.007739][ T9784] usb 6-1: Product: ࠖ [ 589.016461][ T9784] usb 6-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 589.023448][T19279] loop4: detected capacity change from 272 to 0 [ 589.046653][ T9784] usb 6-1: SerialNumber: Д [ 589.079311][T19243] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 589.097577][T19279] minix_free_inode: bit 2 already cleared [ 589.168683][ T8604] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.248803][ T8604] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 589.359447][ T9784] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 589.380910][ T9784] usb 6-1: USB disconnect, device number 30 [ 589.429124][ T8604] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.438399][ T8604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.446422][ T8604] usb 2-1: Product: syz [ 589.457354][ T8604] usb 2-1: Manufacturer: syz [ 589.464795][ T8604] usb 2-1: SerialNumber: syz [ 589.519804][ T8604] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 589.725218][ T8604] usb 2-1: USB disconnect, device number 100 [ 590.098516][ T20] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 590.348552][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 590.468767][ T20] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 590.478742][ T20] usb 6-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.498099][ T20] usb 6-1: config 1 interface 0 has no altsetting 0 [ 590.507477][ T8604] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 590.668624][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.677927][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.694047][ T20] usb 6-1: Product: ࠖ [ 590.699654][ T20] usb 6-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 590.720579][ T20] usb 6-1: SerialNumber: Д [ 590.751143][T19243] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 590.760620][ T8604] usb 2-1: Using ep0 maxpacket: 8 01:01:21 executing program 5: waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)) 01:01:21 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x73, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x7, 0x80, 0x1f, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba3, 0xffff, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x80, 0xf46f}, @mdlm={0x15, 0x24, 0x12, 0x31}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x7, 0x8c}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x20, 0x5, 0x1, 0x10, 0x1}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "cf0808376b5637b35d37afb8b1111eebf536903c0df19a4dfbb67e0642d15882d7ef9dd8b5fdc03c18dce5bcb4533f850489d92c0a972305ba1e99a7786ef16ae073b922ece4c5ccd841ae308bcbb9cc91d8cbd21ac5274027325161cc3e756f9b51313ec322e316198f52c22b637afb6a8859d7b98f27ca79d504ccb450bc6e22cae2399158de1b1aa6f47627c5c3c7783adf2c9a56c42d430bde3e2f3b05640c76593b3d562f2e48c28d45f23f00f42031744e5d4ab3b4d9ac37acd2ddde41e45eeb377cc2f18b0ed6"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "f229e9806faa27c1e3c4bc3da9d0116aff38b83d707bf44b20596087adde193adf16f111c4c955379bba34399768b4965411f744005e44f085779ffef6d8ed30822cc3935e2bd03930ef6d1b22109c3d780a9be4bc877c33e14f0e7d05332e41d006b4eed699c40b187067184b708da9f269dcec9b476e73f7bee1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}, {0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "ab2404238c6051a2a6541c696d875633ccc79fa26e924b8b60833078c6c0fcbd91db8015d37c56f96470b219b6349c0e4420af2bff1efb1b768a560d4c6d2e3f7cce65ae53740a2d74f767ef00e720466541c2a7c4c6c13b7edea499a4a7952acd9cc5ec5933a07a14ca493f77f82bda429f33f1ce5bae83cb156e1dea87c56779bae13215ac7f520a1a2edb41cb8edda53e484c17a037befcb64a8a79fa99a9942506ced5297b17c09446753eca167cfc2e162d3e5a6e61ef49c7830311bf613938a4639ee99a2a87c113e027"}}, {0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="039486507d282e87da1a84eb7e8f93fda8c75f5cefb4ea0e9221dee53b1347077649e2f99724ee8b8d8e9c564a8d8d16da0e239d0c61b2ccea7cfa6b41894a08bc42f018c3f08daf98ef69a8"]}]}) 01:01:21 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 01:01:21 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, 0x0) 01:01:21 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) [ 590.918470][ T8604] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.959592][ T20] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 590.992141][ T20] usb 6-1: USB disconnect, device number 31 [ 591.010851][ T8604] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:01:21 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:22 executing program 5: io_uring_setup(0x6d3f, &(0x7f00000000c0)={0x0, 0x99b7, 0x0, 0x2}) [ 591.208801][ T8604] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.233540][ T8604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.298665][ T8604] usb 2-1: Product: syz [ 591.336621][ T9320] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 591.350599][ T9795] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 591.359868][ T8604] usb 2-1: Manufacturer: syz [ 591.364519][ T8604] usb 2-1: SerialNumber: syz 01:01:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) getdents(0xffffffffffffffff, 0x0, 0x0) 01:01:22 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) [ 591.498608][ T8604] usb 2-1: can't set config #1, error -71 [ 591.535042][ T8604] usb 2-1: USB disconnect, device number 101 01:01:22 executing program 5: select(0x40, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0)={0x0, 0xea60}) 01:01:22 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 591.598293][ T9320] usb 3-1: Using ep0 maxpacket: 8 [ 591.600392][ T9795] usb 1-1: Using ep0 maxpacket: 8 01:01:22 executing program 4: r0 = syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 591.718606][ T9320] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 591.743610][ T9320] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.821362][ T9320] usb 3-1: config 1 interface 0 has no altsetting 0 [ 591.830717][ T9795] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 591.855689][ T9795] usb 1-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 01:01:22 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f00000016c0)) [ 591.883387][T19364] loop4: detected capacity change from 272 to 0 [ 591.921622][ T9795] usb 1-1: config 1 interface 0 has no altsetting 0 [ 592.018613][ T9320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.038613][ T9320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.071474][ T9320] usb 3-1: Product: syz [ 592.086300][ T9320] usb 3-1: Manufacturer: syz [ 592.098708][ T9795] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.099741][ T9320] usb 3-1: SerialNumber: syz [ 592.119621][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.137660][ T9795] usb 1-1: Product: ࠖ [ 592.143283][ T9795] usb 1-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 592.159908][T19325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 592.175035][ T9795] usb 1-1: SerialNumber: Д [ 592.200044][T19331] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 592.439305][ T9320] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 592.462487][ T9320] usb 3-1: USB disconnect, device number 36 [ 592.499596][ T9795] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 592.523893][ T9795] usb 1-1: USB disconnect, device number 29 [ 593.178235][ T20] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 593.208239][ T9350] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 593.418407][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 593.468276][ T9350] usb 1-1: Using ep0 maxpacket: 8 [ 593.538328][ T20] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 593.548388][ T20] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.563430][ T20] usb 3-1: config 1 interface 0 has no altsetting 0 [ 593.708672][ T9350] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 593.718901][ T9350] usb 1-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.728666][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.738155][ T9350] usb 1-1: config 1 interface 0 has no altsetting 0 [ 593.749670][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.758714][ T20] usb 3-1: Product: syz [ 593.763001][ T20] usb 3-1: Manufacturer: syz [ 593.767899][ T20] usb 3-1: SerialNumber: syz [ 593.801907][T19325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 593.938715][ T9350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.948185][ T9350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.956437][ T9350] usb 1-1: Product: ࠖ [ 593.961379][ T9350] usb 1-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 593.982859][ T9350] usb 1-1: SerialNumber: Д 01:01:24 executing program 4: r0 = syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 01:01:24 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 01:01:24 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x5}, &(0x7f0000000540)) 01:01:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000580), 0x4) 01:01:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000780)={'syztnl2\x00', 0x0}) [ 594.049225][ T20] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 594.058306][ T9350] usb 1-1: can't set config #1, error -71 [ 594.088612][ T9350] usb 1-1: USB disconnect, device number 30 [ 594.093668][ T20] usb 3-1: USB disconnect, device number 37 [ 594.183340][T19424] loop4: detected capacity change from 272 to 0 01:01:25 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0xbfa4, &(0x7f0000000040)={[0xc9ab]}, 0x8) 01:01:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}]}, &(0x7f0000000080)=0x10) 01:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) 01:01:25 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 01:01:25 executing program 4: r0 = syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:25 executing program 0: process_vm_readv(0x0, &(0x7f00000076c0)=[{&(0x7f00000066c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 01:01:25 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 01:01:25 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4}]}}}]}}]}}, 0x0) [ 594.621028][T19450] loop4: detected capacity change from 272 to 0 01:01:25 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x585, 0x0) 01:01:25 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) [ 594.939752][T19448] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 01:01:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) 01:01:25 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x6b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba3}, [@mdlm={0x15}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x3, &(0x7f00000002c0)=@string={0x3, 0x3, "f2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x4d, 0x0}]}) [ 595.054290][T19471] loop4: detected capacity change from 272 to 0 [ 595.130068][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd 01:01:26 executing program 2: socket$inet(0x2, 0x0, 0x524) 01:01:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) 01:01:26 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:26 executing program 0: syz_io_uring_setup(0x7e99, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 595.378267][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 595.435091][T19490] loop4: detected capacity change from 272 to 0 [ 595.446699][T19405] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:01:26 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 595.488144][ T9320] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 595.501479][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:01:26 executing program 2: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) [ 595.689952][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.706844][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.728128][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 595.742767][ T20] usb 4-1: Product: syz [ 595.754992][T19508] loop4: detected capacity change from 272 to 0 [ 595.757768][ T20] usb 4-1: Manufacturer: syz [ 595.780176][ T20] usb 4-1: SerialNumber: syz [ 595.844129][T19494] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 595.938959][ T9320] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.954612][ T9320] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 595.964691][ T9320] usb 2-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 595.978188][ T9320] usb 2-1: config 1 interface 0 has no altsetting 0 [ 596.038366][ T9320] usb 2-1: language id specifier not provided by device, defaulting to English [ 596.069082][ T20] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 596.085923][ T20] usb 4-1: USB disconnect, device number 14 [ 596.358603][ T9320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.377129][ T9320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.387412][ T9320] usb 2-1: SerialNumber: syz [ 596.439971][T19482] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 596.699598][ T9320] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 596.746753][ T9320] usb 2-1: USB disconnect, device number 102 [ 596.808302][ T20] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 597.068111][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 597.198227][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 597.368234][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.377639][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.391005][ T20] usb 4-1: Product: syz [ 597.395219][ T20] usb 4-1: Manufacturer: syz [ 597.402749][ T20] usb 4-1: SerialNumber: syz [ 597.458320][ T9320] usb 2-1: new high-speed USB device number 103 using dummy_hcd 01:01:28 executing program 3: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000043000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000008b28672ad3094ca618ce8cbd007043d733b318fcb3eb00652bcd42fd831d659db5f16a2d56206374b9a087b299e6981cf9170900000000000000fd31adf7ebc88f5244715b77b0a8d05fb70460aadedd0cd98308b29d80b5aae0c702cfa6f9f7e154242e1b5fed0299f3e06b63a065f321aa40252b423d8d9cb56cea38bae66377bba3009b9704d6e658f870e4503e90db384fc97fb7a442115e9d63d213e5d21ccb304a35eaa3fb2369123c68a789ba5d2ed64527c2234cc45d6ffda9e64050561d81273dda563140b5d8a4621f0e81968569929844dd040900000000a700004a44aa652b9d744802cfbbfb6179a5bdf264000000620edbff6ad38fb54bb7884ca27c48843db9d84c11074d79a227c611213d2f7a827d5b443790330e041462101780ee6f6e0ff19a8573274d7ab9b394fc27dff4a8dfab849c6fb3b71a285d088c015c04003f3f2f70c71f06e0c7b190a445464676c0e5b586cc1375bc2cc465e7465e025f95a749c4af5965f68d4507fc4e534646b6e39087908c40202bba1bc1c29c8802d940b31ee0490d436b75bf6836c6908be0910c7b90858642e3bc1265519993fc08b85fd9824d23c6ed7aade0196c7cb3b9e1af5c52b7c57b313e1272e4520b6797118d849d6e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) recvmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0x0, 0x0, [0x0, 0x0, 0x14], r2}, 0x40) 01:01:28 executing program 0: syz_io_uring_setup(0x3b64, &(0x7f0000000000), &(0x7f0000003000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000080), 0x0) 01:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000880)=""/142, 0x8e}], 0xa}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r4, 0x0) 01:01:28 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) [ 597.698119][ T9320] usb 2-1: Using ep0 maxpacket: 8 [ 597.703723][ T20] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 597.739272][ T20] usb 4-1: USB disconnect, device number 15 [ 597.910329][ T9320] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.973733][ T9320] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 598.071745][ T9320] usb 2-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.115415][T19560] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 598.125278][ T9320] usb 2-1: config 1 interface 0 has no altsetting 0 01:01:29 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f00000016c0)) 01:01:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:01:29 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001200)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001100)=[{0x0}, {0x0}], 0x2}, 0x40000000) 01:01:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) [ 598.268225][ T9320] usb 2-1: string descriptor 0 read error: -71 [ 598.276713][ T9320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.328852][ T9320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:01:29 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f00000016c0)) 01:01:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x311}, 0x14}}, 0x0) [ 598.408412][ T9320] usb 2-1: can't set config #1, error -71 [ 598.443254][ T9320] usb 2-1: USB disconnect, device number 103 01:01:29 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 01:01:29 executing program 2: syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x100000001, 0x200080) 01:01:29 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:29 executing program 0: r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='*),\x00%$%\x00', 0x0, r1) 01:01:29 executing program 3: mq_open(&(0x7f00000017c0)='\x00', 0x0, 0x0, &(0x7f0000001800)) [ 598.854443][T19598] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 01:01:29 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 01:01:29 executing program 3: r0 = fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='%!\xd4*\x00', 0x0, 0x0) [ 598.978640][T19623] loop4: detected capacity change from 8 to 0 [ 599.070419][T19623] Unable to read inode block 01:01:29 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 01:01:29 executing program 5: syz_genetlink_get_family_id$l2tp(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @private=0xa010101}}}}) [ 599.117901][T19623] MINIX-fs: get root inode failed 01:01:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) 01:01:30 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:30 executing program 3: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800000000003, 0x40001) 01:01:30 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) 01:01:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000d40)) 01:01:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private}]}, &(0x7f0000000080)=0x10) [ 599.428770][ T7] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 599.452323][T19648] loop4: detected capacity change from 8 to 0 [ 599.525602][T19648] Unable to read inode block [ 599.553526][T19648] MINIX-fs: get root inode failed 01:01:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x35a3aad1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/4103, 0x1007}], 0x1, 0x0, 0x0, 0x10}, 0x0) 01:01:30 executing program 0: syz_io_uring_setup(0x3b64, &(0x7f0000000000), &(0x7f0000003000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) [ 599.718238][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 599.889823][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 599.978583][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 600.299947][ T7] usb 2-1: string descriptor 0 read error: -22 [ 600.308676][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.329087][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.389857][ T7] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 600.598512][ T20] usb 2-1: USB disconnect, device number 104 [ 601.378152][ T20] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 601.628079][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 601.788334][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 601.888516][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:01:32 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private0}, 0x14) 01:01:32 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f0000000100)) 01:01:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 01:01:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 01:01:32 executing program 5: fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) [ 602.108043][ T20] usb 2-1: string descriptor 0 read error: -71 [ 602.115542][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.188640][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.226766][T19706] loop4: detected capacity change from 8 to 0 01:01:33 executing program 0: syz_io_uring_setup(0x7e99, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 602.268184][ T20] usb 2-1: can't set config #1, error -71 [ 602.281011][ T20] usb 2-1: USB disconnect, device number 105 01:01:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000080)) [ 602.334422][T19706] Unable to read inode block 01:01:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) 01:01:33 executing program 2: syz_io_uring_setup(0x3b64, &(0x7f0000000000), &(0x7f0000003000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 602.384330][T19706] MINIX-fs: get root inode failed 01:01:33 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 01:01:33 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {0x0, 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:33 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 01:01:33 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x9, 0x0) 01:01:33 executing program 0: io_uring_setup(0x5f02, &(0x7f0000000000)={0x0, 0x0, 0x3}) [ 602.717882][T19745] loop4: detected capacity change from 272 to 0 01:01:33 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {0x0, 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:33 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10000000) 01:01:33 executing program 2: socketpair(0x2b, 0x0, 0x0, &(0x7f00000016c0)) 01:01:33 executing program 5: io_uring_setup(0x6d3f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x1dc}) 01:01:33 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 603.009552][T19765] loop4: detected capacity change from 272 to 0 01:01:33 executing program 0: socketpair(0xa, 0x0, 0xffff, &(0x7f0000000240)) 01:01:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:01:33 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {0x0, 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:34 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x25, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000d00)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000240), 0x4) syz_io_uring_setup(0x81f, &(0x7f0000000100)={0x0, 0x2706, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:01:34 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 01:01:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 01:01:34 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 01:01:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001eb, 0x4000884) [ 603.461356][T19798] loop4: detected capacity change from 272 to 0 01:01:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 01:01:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001200)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001100)=[{0x0}, {0x0}], 0x2}, 0x0) 01:01:34 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00), 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:34 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) [ 603.773988][T19818] QAT: failed to copy from user cfg_data. 01:01:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000100)=0xa) [ 603.861671][T19821] loop4: detected capacity change from 272 to 0 01:01:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 01:01:34 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00), 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:34 executing program 1: r0 = fsopen(&(0x7f0000000040)='ufs\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 604.204005][T19832] QAT: failed to copy from user cfg_data. 01:01:35 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:01:35 executing program 2: syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) [ 604.310009][T19836] loop4: detected capacity change from 272 to 0 01:01:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 01:01:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 01:01:35 executing program 1: syz_io_uring_setup(0x3b64, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x14a}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:01:35 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f00000016c0)) 01:01:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x80}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10) 01:01:35 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00), 0x0, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 604.866341][T19863] loop4: detected capacity change from 272 to 0 01:01:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 01:01:35 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) 01:01:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/59, 0x3b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(r3, 0x0) [ 604.996264][T19861] can: request_module (can-proto-0) failed. 01:01:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 01:01:35 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e", 0x45, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 605.049490][T19861] can: request_module (can-proto-0) failed. 01:01:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 01:01:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x90) [ 605.271143][T19884] loop4: detected capacity change from 272 to 0 01:01:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0xa0, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x84, 0x33, @beacon={@with_ht={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "11123f9ccf69"}]}}]}, 0xa0}}, 0x0) 01:01:36 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e", 0x45, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 605.408258][ T20] usb 3-1: new high-speed USB device number 38 using dummy_hcd 01:01:36 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) [ 605.544153][T19897] loop4: detected capacity change from 272 to 0 01:01:36 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil}) [ 605.657942][ T20] usb 3-1: Using ep0 maxpacket: 8 01:01:36 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 01:01:36 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e", 0x45, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 605.843186][T19912] loop4: detected capacity change from 272 to 0 [ 605.908443][ T20] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 605.968447][ T20] usb 3-1: language id specifier not provided by device, defaulting to English [ 606.117321][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.127716][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.151977][ T20] usb 3-1: Product: syz [ 606.156202][ T20] usb 3-1: Manufacturer: syz [ 606.177250][ T20] usb 3-1: SerialNumber: syz [ 606.239354][ T20] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 606.444430][ T7] usb 3-1: USB disconnect, device number 38 [ 607.227855][ T9795] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 607.467998][ T9795] usb 3-1: Using ep0 maxpacket: 8 [ 607.668337][ T9795] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 607.718236][ T9795] usb 3-1: language id specifier not provided by device, defaulting to English [ 607.838171][ T9795] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.847266][ T9795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.858953][ T9795] usb 3-1: Product: syz [ 607.863148][ T9795] usb 3-1: Manufacturer: syz [ 607.872436][ T9795] usb 3-1: SerialNumber: syz [ 607.918980][ T9795] cdc_ether: probe of 3-1:1.0 failed with error -22 01:01:38 executing program 2: syz_open_dev$audion(&(0x7f0000001540)='/dev/audio#\x00', 0x0, 0x2741) 01:01:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 01:01:38 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f00000016c0)) 01:01:38 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/103, 0x67, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:38 executing program 1: socket(0x10, 0x3, 0x401) 01:01:38 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) [ 608.034684][ T20] usb 3-1: USB disconnect, device number 39 01:01:38 executing program 5: io_uring_setup(0x1727, &(0x7f00000014c0)={0x0, 0x0, 0x2, 0x0, 0x397}) [ 608.172883][T19955] loop4: detected capacity change from 272 to 0 01:01:39 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0xc2e40, 0x0) 01:01:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 01:01:39 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 01:01:39 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/103, 0x67, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:39 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001500), &(0x7f0000001540)=0x10) 01:01:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x11, 0x800000003, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746b9c66ba", 0x7ff2, 0x20c49a, 0x0, 0x27) 01:01:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 01:01:39 executing program 5: syz_io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0x4963, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 01:01:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001600), 0x8) [ 608.608121][T19982] loop4: detected capacity change from 272 to 0 01:01:39 executing program 3: syz_io_uring_setup(0x81f, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:01:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) 01:01:39 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/103, 0x67, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac794038"}}) 01:01:39 executing program 5: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x101000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000340)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x3, &(0x7f0000002540)=""/152, 0x98}, 0x40) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x200200) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000300)={0x2, 0x400, 0x33a9, 0xad5, 0x0, 0x9}) fsmount(0xffffffffffffffff, 0x0, 0x73) [ 609.131805][T20017] loop4: detected capacity change from 272 to 0 01:01:40 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x585, 0x4000) 01:01:40 executing program 2: syz_io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0x4963, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 01:01:40 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/120, 0x78, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 01:01:40 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000800), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 01:01:40 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) select(0x40, &(0x7f0000002a00)={0x9}, 0x0, 0x0, 0x0) [ 609.511564][T20034] loop4: detected capacity change from 272 to 0 01:01:40 executing program 2: r0 = fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 01:01:40 executing program 5: socketpair(0x8, 0x0, 0x0, &(0x7f00000016c0)) 01:01:40 executing program 2: syz_io_uring_setup(0x81f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), 0x0) 01:01:40 executing program 3: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/time\x00') 01:01:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @private}]}, &(0x7f0000000080)=0x10) 01:01:40 executing program 0: epoll_create1(0x4934dbcc6f03f22b) 01:01:40 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/120, 0x78, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:40 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) 01:01:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffffffc, @private0={0xfc, 0x0, [], 0x1}, 0x80}, @in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 01:01:40 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) 01:01:40 executing program 2: syz_io_uring_setup(0x81f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:01:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffffffc, @private0={0xfc, 0x0, [], 0x1}, 0x80}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10) 01:01:40 executing program 1: socketpair(0x25, 0x0, 0x0, &(0x7f0000000cc0)) [ 609.991232][T20073] loop4: detected capacity change from 272 to 0 01:01:41 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e00"/120, 0x78, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:41 executing program 3: fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) 01:01:41 executing program 1: fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) 01:01:41 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba3}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8c}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) 01:01:41 executing program 0: syz_io_uring_setup(0x7f6c, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x12b, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 01:01:41 executing program 2: syz_io_uring_setup(0x6032, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:01:41 executing program 1: syz_io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0xd62, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) [ 610.437576][T20107] loop4: detected capacity change from 272 to 0 01:01:41 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 01:01:41 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", 0x81, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200), 0x4) 01:01:41 executing program 0: syz_io_uring_setup(0x7f6c, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x12b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 01:01:41 executing program 2: fsopen(&(0x7f0000000100)='cifs\x00', 0x0) [ 610.678043][ T9320] usb 6-1: new high-speed USB device number 32 using dummy_hcd 01:01:41 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) exit(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000008100000008000300", @ANYRES32=r1, @ANYBLOB="060066008e8800000a00060008021100000100003c0033"], 0x6c}}, 0x0) 01:01:41 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "61a3b57b66df93d05e1dbde2ac7855740663c27df66240bcf8c9a900ed787c728f9d841434df6784b9f04120429944c6118d9fa07788548574d99188b997ab"}, 0x60) 01:01:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10) [ 610.824904][T20151] loop4: detected capacity change from 272 to 0 [ 610.937804][ T9320] usb 6-1: Using ep0 maxpacket: 8 [ 611.168222][ T9320] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 611.183130][ T9320] usb 6-1: config 1 interface 0 has no altsetting 0 [ 611.238298][ T9320] usb 6-1: language id specifier not provided by device, defaulting to English [ 611.368225][ T9320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.382312][ T9320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.403173][ T9320] usb 6-1: Product: syz [ 611.409523][ T9320] usb 6-1: Manufacturer: syz [ 611.414446][ T9320] usb 6-1: SerialNumber: syz [ 611.469286][ T9320] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 611.673970][ T9784] usb 6-1: USB disconnect, device number 32 [ 612.447789][ T9784] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 612.687738][ T9784] usb 6-1: Using ep0 maxpacket: 8 [ 612.888098][ T9784] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 612.906392][ T9784] usb 6-1: config 1 interface 0 has no altsetting 0 [ 612.958284][ T9784] usb 6-1: language id specifier not provided by device, defaulting to English [ 613.088463][ T9784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.097545][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.110157][ T9784] usb 6-1: Product: syz [ 613.114385][ T9784] usb 6-1: Manufacturer: syz [ 613.123479][ T9784] usb 6-1: SerialNumber: syz [ 613.169259][ T9784] cdc_ether: probe of 6-1:1.0 failed with error -22 01:01:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffffffc, @private0}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10) 01:01:44 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 01:01:44 executing program 0: fsopen(&(0x7f0000000000)='jfs\x00', 0x0) 01:01:44 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 01:01:44 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", 0x81, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440), 0x8) [ 613.345846][ T9320] usb 6-1: USB disconnect, device number 33 01:01:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 01:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x13c}}, 0x0) [ 613.493092][T20212] loop4: detected capacity change from 272 to 0 01:01:44 executing program 1: io_uring_setup(0x6d3f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1dc}) 01:01:44 executing program 2: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103", 0x783, 0x880}, {0x0, 0x0, 0x11000}], 0x0, &(0x7f0000000040)=ANY=[]) 01:01:44 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", 0x81, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:44 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') 01:01:44 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0xc2e40, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000700)) [ 613.824098][T20230] loop2: detected capacity change from 272 to 0 01:01:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 01:01:44 executing program 1: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x197442) 01:01:44 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) [ 614.015245][T20244] loop4: detected capacity change from 272 to 0 [ 614.062792][T20248] QAT: Device 0 not found 01:01:44 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x73, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba3, 0xffff, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x80, 0xf46f}, @mdlm={0x15, 0x24, 0x12, 0x31}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x7, 0x8c}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x20, 0x5, 0x1, 0x10, 0x1}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "cf0808376b5637b35d37afb8b1111eebf536903c0df19a4dfbb67e0642d15882d7ef9dd8b5fdc03c18dce5bcb4533f850489d92c0a972305ba1e99a7786ef16ae073b922ece4c5ccd841ae308bcbb9cc91d8cbd21ac5274027325161cc3e756f9b51313ec322e316198f52c22b637afb6a8859d7b98f27ca79d504ccb450bc6e22cae2399158de1b1aa6f47627c5c3c7783adf2c9a56c42d430bde3e2f3b05640c76593b3d562f2e48c28d45f23f00f42031744e5d4ab3b4d9ac37acd2ddde41e45eeb377cc2f18b0ed6"}}, {0x7d, &(0x7f00000002c0)=@string={0x7d, 0x3, "f229e9806faa27c1e3c4bc3da9d0116aff38b83d707bf44b20596087adde193adf16f111c4c955379bba34399768b4965411f744005e44f085779ffef6d8ed30822cc3935e2bd03930ef6d1b22109c3d780a9be4bc877c33e14f0e7d05332e41d006b4eed699c40b187067184b708da9f269dcec9b476e73f7bee1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}, {0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "ab2404238c6051a2a6541c696d875633ccc79fa26e924b8b60833078c6c0fcbd91db8015d37c56f96470b219b6349c0e4420af2bff1efb1b768a560d4c6d2e3f7cce65ae53740a2d74f767ef00e720466541c2a7c4c6c13b7edea499a4a7952acd9cc5ec5933a07a14ca493f77f82bda429f33f1ce5bae83cb156e1dea87c56779bae13215ac7f520a1a2edb41cb8edda53e484c17a037befcb64a8a79fa99a9942506ced5297b17c09446753eca167cfc2e162d3e5a6e61ef49c7830311bf613938a4639ee99a2a87c113e027"}}, {0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="039486507d282e87da1a84eb7e8f93fda8c75f5cefb4ea0e9221dee53b1347077649e2f99724ee8b8d8e9c564a8d8d16da0e239d0c61b2ccea7cfa6b41894a08bc42f018c3f08daf98ef69a8"]}]}) 01:01:44 executing program 5: syz_io_uring_setup(0x26ce, &(0x7f0000000800), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 01:01:45 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066", 0x85, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000d00)=@assoc_value, &(0x7f0000000d40)=0x8) 01:01:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 01:01:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8901, &(0x7f0000000100)) [ 614.418268][ T9320] usb 4-1: new high-speed USB device number 16 using dummy_hcd 01:01:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'geneve0\x00', 0x0}) [ 614.495090][T20277] loop4: detected capacity change from 272 to 0 01:01:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 01:01:45 executing program 1: inotify_init1(0x1c0800) 01:01:45 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066", 0x85, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 614.657756][ T9320] usb 4-1: Using ep0 maxpacket: 8 01:01:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) 01:01:45 executing program 2: r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) [ 614.778438][ T9320] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 614.818233][ T9320] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.855366][ T9320] usb 4-1: config 1 interface 0 has no altsetting 0 [ 614.884237][T20299] loop4: detected capacity change from 272 to 0 [ 615.047906][ T9320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.057297][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.068401][ T9320] usb 4-1: Product: ࠖ [ 615.073753][ T9320] usb 4-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 615.107777][ T9320] usb 4-1: SerialNumber: Д [ 615.160052][T20255] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 615.439068][ T9320] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 615.460173][ T9320] usb 4-1: USB disconnect, device number 16 [ 616.167686][ T9320] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 616.417673][ T9320] usb 4-1: Using ep0 maxpacket: 8 [ 616.558034][ T9320] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 616.568142][ T9320] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 616.586607][ T9320] usb 4-1: config 1 interface 0 has no altsetting 0 [ 616.778624][ T9320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.792697][ T9320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.800958][ T9320] usb 4-1: Product: ࠖ [ 616.805151][ T9320] usb 4-1: Manufacturer: ⧲胩ꩯ섧쓣㶼킩樑㣿㶸筰䯴夠蝠㨙ᛟᇱ진㝕몛㤴梗隴ᅔ䓷帀瞅ﺟロⲂ鏃⭞㧐᭭ဢ㶜੸螼㍼信紎㌅䄮ې駖௄瀘ᡧ灋ꦍ槲䞛獮뻷 [ 616.826760][ T9320] usb 4-1: SerialNumber: Д [ 616.861466][T20255] raw-gadget gadget: fail, usb_ep_enable returned -22 01:01:47 executing program 3: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x3, 0x6) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x29, 0x3, 0x0, 0x3ff, 0x3, @dev={0xfe, 0x80, [], 0x36}, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0xe289}}) 01:01:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:01:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)=ANY=[], &(0x7f0000003900)=0xb6) 01:01:47 executing program 1: getitimer(0x0, &(0x7f0000002580)) 01:01:47 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000c00)='/dev/vcsa#\x00', 0x0, 0x1) write$tcp_mem(r0, &(0x7f0000000080), 0x92000) 01:01:47 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066", 0x85, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 617.118749][ T9320] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 617.147862][ T9320] usb 4-1: USB disconnect, device number 17 [ 617.256014][T20340] loop4: detected capacity change from 272 to 0 01:01:48 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c", 0x87, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{}, {0x6}]}) 01:01:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000100)) 01:01:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x0, 0x0) [ 617.545679][ T36] audit: type=1326 audit(1609462908.313:26): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20351 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 617.583017][T20359] loop4: detected capacity change from 272 to 0 01:01:48 executing program 5: syz_mount_image$udf(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)=@random={'osx.', '\x00'}, 0x0, 0x0) 01:01:48 executing program 1: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000001440)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x202, 0x4000000000dc) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f00000000c0), 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x29, 0x3, 0x0, 0x3ff, 0x3, @dev, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0xe289, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x4, 0x0, {{0xd, 0x4, 0x0, 0xb, 0x34, 0x0, 0x0, 0x37, 0x0, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x8, 0x51, 0x0, 0x5, [0x4]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xb0, 0x1, 0x0, [{@remote}, {@dev, 0x81}]}]}}}}}) 01:01:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='d'], 0x64}}, 0x0) 01:01:49 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c", 0x87, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:49 executing program 5: syz_mount_image$udf(&(0x7f00000000c0)='udf\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@unhide='unhide'}, {@session={'session'}}]}) 01:01:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 618.320473][T20390] loop4: detected capacity change from 272 to 0 [ 618.352098][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 618.361415][ T36] audit: type=1326 audit(1609462909.133:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20351 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 618.384224][T20385] UDF-fs: Scanning with blocksize 512 failed [ 618.399768][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found 01:01:49 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x1) write$tcp_mem(r0, &(0x7f0000000080), 0x200000c8) syz_open_dev$vcsa(&(0x7f0000000c00)='/dev/vcsa#\x00', 0x0, 0x80e00) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) [ 618.419184][T20385] UDF-fs: Scanning with blocksize 1024 failed [ 618.438986][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 618.463643][T20385] UDF-fs: Scanning with blocksize 2048 failed 01:01:49 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f00000001c0)) [ 618.485361][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 618.503131][T20385] UDF-fs: Scanning with blocksize 4096 failed 01:01:49 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c", 0x87, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:49 executing program 3: lremovexattr(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)=ANY=[]) 01:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)='+', 0x1}], 0x2}}], 0x1, 0x0) [ 618.660541][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found 01:01:49 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c65", 0x88, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 618.705041][T20385] UDF-fs: Scanning with blocksize 512 failed [ 618.705178][T20411] loop4: detected capacity change from 272 to 0 01:01:49 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000003d00)='./file1\x00', &(0x7f0000003d40)='9p\x00', 0x0, &(0x7f0000003d80)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 618.771232][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 618.798194][T20385] UDF-fs: Scanning with blocksize 1024 failed [ 618.811692][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 618.827305][T20385] UDF-fs: Scanning with blocksize 2048 failed 01:01:49 executing program 3: syz_mount_image$udf(&(0x7f00000000c0)='udf\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000200)) [ 618.867941][T20385] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found 01:01:49 executing program 2: syz_mount_image$hfsplus(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'security.selinux\x00'}, &(0x7f0000000100)=""/71, 0x47) [ 618.927697][T20385] UDF-fs: Scanning with blocksize 4096 failed [ 618.944829][T20423] loop4: detected capacity change from 272 to 0 01:01:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x25]}}, {@huge_never='huge=never'}]}) 01:01:49 executing program 5: syz_mount_image$hfsplus(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) 01:01:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:01:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) 01:01:50 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5000000, &(0x7f0000000500), 0x0, &(0x7f0000000680)) 01:01:50 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c65", 0x88, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:50 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 01:01:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x6d]}}]}) 01:01:50 executing program 2: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000001440)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f00000000c0), 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x3, @dev={0xfe, 0x80, [], 0x36}, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0x0, 0x8}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000a00)={@dev, @dev}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004000) [ 619.432269][T20447] loop4: detected capacity change from 272 to 0 01:01:50 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c65", 0x88, 0x11000}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:50 executing program 5: syz_mount_image$udf(&(0x7f00000000c0)='udf\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0), 0x2000, &(0x7f0000000200)) 01:01:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size'}}]}) [ 619.886941][T20462] tmpfs: Bad value for 'size' [ 619.893727][T20463] loop4: detected capacity change from 272 to 0 [ 619.905605][T20462] tmpfs: Bad value for 'size' 01:01:50 executing program 1: syz_mount_image$hfsplus(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='user.incfs.size\x00', 0x0, 0x0, 0x0) 01:01:50 executing program 5: mkdir(0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 01:01:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 01:01:50 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) [ 620.273207][T20481] __nla_validate_parse: 2 callbacks suppressed [ 620.273227][T20481] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:01:51 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000c40)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 01:01:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8903, &(0x7f0000000100)) [ 620.363380][T20484] loop4: detected capacity change from 8 to 0 [ 620.468563][T20484] Unable to read inode block 01:01:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) [ 620.503561][T20484] MINIX-fs: get root inode failed 01:01:51 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) dup3(r2, r0, 0x0) 01:01:51 executing program 2: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000001440)="01017ccb14fb629c21d0d8858c0192f18e9083ab2d41fea8b8a909e0b13fc877995875e1cdc7b4b1791016f517e8c8f6f3c7feddaa0e84f3a8ea7f053f0bee2527b487a38313537cb85dc162a5d7f3d92539edcb622febb94b1b563c3dbf931bae224865aaff440692bd42062ede38cfbcc9d5912037fd6738ad2e31fe601e424ab306932cd9e1eee68842801600e271f62966aca21b79a8ef6ea418484fb92a9a56d4ac3ff12688e376e886328316a29f3d3a535157a7d0fc07bbf86ff44ae9285ad7ca97d3a58f6be1c734da3fd7e4526aa6378e82a77635fb305cb6705dfab4441aa5a6e1def28264259773238da944b5ed1f3eccc6d53540a747e6ae367016b7f755603ba573d8f3131bedf17da701de243bd9f6419859852c1db086e5ce686431b05709f0e60050624e4b02edede0d43faf5116812025070f49df909e7b8e2de09d661fe003212753a01d75c18e0239f10399676a3abd9940c56afdce6ce8752eb54259dff0244cae864a6de7f14c98f7df2cd6d5cf3a21dc99c49b3f328f1f093fb8acd270402957cd35930592b87c8f94425330fc7487506a7d4e11ff999658b306b6a65b878ec64ff4dc52dbc1e3f17cb882e3c0079f17d7ed37238bbceb8eb06a5ec6aa7554bd3d6c710af5dd2f73af23a84b44577d44a4a0d631404e4dab8cbf3945b8003c80b7f6d2452a2f535d7cb2e31130e63832c7379742740b3e23f3ff77f79c788e7d09f679cab652b0aacd98808185fc36b1c536de34cef9d931cf1baee0ec1f8481c4a321b94f1c6d03af80ad03e8b559f1bb9dc91a0f046a33f5c3cc5925d5b007e492c5966a27f7c41ca3f69110c40ea458b8146dc2907e0505fffb048c0b951eccc7fcee5dfc6c215cf6400197992d2c5fc613e48149c179c5a6e0874fe05016f3818d9232f98efdb34d3c9f7b5bc02f97d823b82c463f1f13a796cfe85a36eaf641712737398762bae2f270f276deca030f87f801fd0a499c7cfc89767e49a645b62507e054927dafe767c5ff57a485bb9d8ab355a9e3c2a088049731cc99fe5ba48247286ab4f94ea839e13427a455c906b0fcdf8103009c6ed96cf4a6cebe644a4d3ae2b14592744ba648f4a43486edfd4062f310297b41a03e10ec67c36a8b040ec386389f11c052c22516e750e03834001c6e933612a9915ea0854cdbf065de2b735fc5f18972c18aa28f667df8ed93c936ad211e4c2558486a6904d82a914935bb6ea1b4badefc41935d1138b3ce52accb57c12d1c7866e72701e8fb7c7861b400c4558970cbdb2701ac57f099f68420082160da2c63d32d3fc0a2ae604d0c9ab2ba653742b97b12d18d829afb54f310dd10ac683da514c1e3943e25641570f6784499f4e9767252ccc3975be36ae0f55897ff5ed1355bbad80629af71bb4ea21c6bd1387805f3b8000bb91d047ca9b581e1bfc36700044f9568c2edf449a5598bbdc37380b91e519a7494bda6ac9c6dd9f7cd40f5fcd21150bd486171f35f0836402284d99eeaec826869ab670a61364f11d3e42cd1f9977b25526807d70a7a2a4cc2f0b3c58da28e86be7fa228fd209f7e9ee8e489e9b9261a1de487ee665e80885eccebe5a6dace679fb59d61707d04b448d284d68cdd2db3e193fd56f00cfce7c4c5dd9c266acfdc5bd9b619417cc3042f897f3497354dd75d5ed42cbc1b8b2f1824f7cf5a643e04cf47061861795c42396b3d42b4809edd22a066c2940ce4561867a12e3ce0131e602d50e26dda7ccec434e516597cc26a842b285578c20613b99057faa1ad14ae4f65f772285225fc111f72fa3533c658464adf06cf63abf14c209cc3a15a42a31345eed1edba69217e4af375410b468df003d19e5a88c70d0ffdb5a8c818be3a035dd1a34d2d894aefdc649811a861ce1c0e7d135ddf24e52461a2811e4e0268060c8ca95eb9c6cd32d40adacba2c9a8310e87075aac50c28c219efa9735557ce4ed75370351c3305d2f2f32adcb4ea4d2852ec95190b2d90e8c23b6c6352b0941a26f33043c535993d699b1f31504c2cc32570df798700a5d468b69c643a47b8f1ed76f6ffbc6ef1cb84b3f9545b5dc89f5b9fb40be39c4b454554c68f6f3c9ad4e654a4f17c5cd42dcf9d94f4e1de8fef6f4493a8348ddb015d66fb96f1b3a2e0898472a1b0c1842783fe3e6df281acd4c77de95b858a7f89daea5d4860093892c5160e44db2bbd8e126a553e491c1349aedaac8326d5023f43ef80755cbe19a22a6c7920cd6097f30aba261fa49e2f47db183824f826c6073a1a5e3532a3a4d8b5b804a973c9e3a57d3896bb19a7f2e189ceb181aa28dd76c06e4afc20d8b1e7c2dce37239f438e8fbef1d76713c41d1fd17bab73386e2bf3fc29805b4e2fd191b92d2f4180f0f52cbf97318d650974158b77f878a51f30e19214a3d8be44d8217f2a8c6d14d7467d0b99d7ac825a3d80d19dfc12894cae9c5b733cb5e4337a71da42e5f9e5"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f00000000c0), 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x3, @dev={0xfe, 0x80, [], 0x36}, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0x0, 0x8}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000a00)={@dev, @dev}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004000) 01:01:51 executing program 1: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) 01:01:51 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:51 executing program 3: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000001440)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f00000000c0), 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x3, @dev={0xfe, 0x80, [], 0x36}, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0x0, 0x8}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000a00)={@dev, @dev}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004000) 01:01:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) [ 620.850853][T20514] loop4: detected capacity change from 8 to 0 01:01:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) [ 620.996167][T20514] Unable to read inode block 01:01:51 executing program 3: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000001440)="01017ccb14fb629c21d0d8858c0192f18e9083ab2d41fea8b8a909e0b13fc877995875e1cdc7b4b1791016f517e8c8f6f3c7feddaa0e84f3a8ea7f053f0bee2527b487a38313537cb85dc162a5d7f3d92539edcb622febb94b1b563c3dbf931bae224865aaff440692bd42062ede38cfbcc9d5912037fd6738ad2e31fe601e424ab306932cd9e1eee68842801600e271f62966aca21b79a8ef6ea418484fb92a9a56d4ac3ff12688e376e886328316a29f3d3a535157a7d0fc07bbf86ff44ae9285ad7ca97d3a58f6be1c734da3fd7e4526aa6378e82a77635fb305cb6705dfab4441aa5a6e1def28264259773238da944b5ed1f3eccc6d53540a747e6ae367016b7f755603ba573d8f3131bedf17da701de243bd9f6419859852c1db086e5ce686431b05709f0e60050624e4b02edede0d43faf5116812025070f49df909e7b8e2de09d661fe003212753a01d75c18e0239f10399676a3abd9940c56afdce6ce8752eb54259dff0244cae864a6de7f14c98f7df2cd6d5cf3a21dc99c49b3f328f1f093fb8acd270402957cd35930592b87c8f94425330fc7487506a7d4e11ff999658b306b6a65b878ec64ff4dc52dbc1e3f17cb882e3c0079f17d7ed37238bbceb8eb06a5ec6aa7554bd3d6c710af5dd2f73af23a84b44577d44a4a0d631404e4dab8cbf3945b8003c80b7f6d2452a2f535d7cb2e31130e63832c7379742740b3e23f3ff77f79c788e7d09f679cab652b0aacd98808185fc36b1c536de34cef9d931cf1baee0ec1f8481c4a321b94f1c6d03af80ad03e8b559f1bb9dc91a0f046a33f5c3cc5925d5b007e492c5966a27f7c41ca3f69110c40ea458b8146dc2907e0505fffb048c0b951eccc7fcee5dfc6c215cf6400197992d2c5fc613e48149c179c5a6e0874fe05016f3818d9232f98efdb34d3c9f7b5bc02f97d823b82c463f1f13a796cfe85a36eaf641712737398762bae2f270f276deca030f87f801fd0a499c7cfc89767e49a645b62507e054927dafe767c5ff57a485bb9d8ab355a9e3c2a088049731cc99fe5ba48247286ab4f94ea839e13427a455c906b0fcdf8103009c6ed96cf4a6cebe644a4d3ae2b14592744ba648f4a43486edfd4062f310297b41a03e10ec67c36a8b040ec386389f11c052c22516e750e03834001c6e933612a9915ea0854cdbf065de2b735fc5f18972c18aa28f667df8ed93c936ad211e4c2558486a6904d82a914935bb6ea1b4badefc41935d1138b3ce52accb57c12d1c7866e72701e8fb7c7861b400c4558970cbdb2701ac57f099f68420082160da2c63d32d3fc0a2ae604d0c9ab2ba653742b97b12d18d829afb54f310dd10ac683da514c1e3943e25641570f6784499f4e9767252ccc3975be36ae0f55897ff5ed1355bbad80629af71bb4ea21c6bd1387805f3b8000bb91d047ca9b581e1bfc36700044f9568c2edf449a5598bbdc37380b91e519a7494bda6ac9c6dd9f7cd40f5fcd21150bd486171f35f0836402284d99eeaec826869ab670a61364f11d3e42cd1f9977b25526807d70a7a2a4cc2f0b3c58da28e86be7fa228fd209f7e9ee8e489e9b9261a1de487ee665e80885eccebe5a6dace679fb59d61707d04b448d284d68cdd2db3e193fd56f00cfce7c4c5dd9c266acfdc5bd9b619417cc3042f897f3497354dd75d5ed42cbc1b8b2f1824f7cf5a643e04cf47061861795c42396b3d42b4809edd22a066c2940ce4561867a12e3ce0131e602d50e26dda7ccec434e516597cc26a842b285578c20613b99057faa1ad14ae4f65f772285225fc111f72fa3533c658464adf06cf63abf14c209cc3a15a42a31345eed1edba69217e4af375410b468df003d19e5a88c70d0ffdb5a8c818be3a035dd1a34d2d894aefdc649811a861ce1c0e7d135ddf24e52461a2811e4e0268060c8ca95eb9c6cd32d40adacba2c9a8310e87075aac50c28c219efa9735557ce4ed75370351c3305d2f2f32adcb4ea4d2852ec95190b2d90e8c23b6c6352b0941a26f33043c535993d699b1f31504c2cc32570df798700a5d468b69c643a47b8f1ed76f6ffbc6ef1cb84b3f9545b5dc89f5b9fb40be39c4b454554c68f6f3c9ad4e654a4f17c5cd42dcf9d94f4e1de8fef6f4493a8348ddb015d66fb96f1b3a2e0898472a1b0c1842783fe3e6df281acd4c77de95b858a7f89daea5d4860093892c5160e44db2bbd8e126a553e491c1349aedaac8326d5023f43ef80755cbe19a22a6c7920cd6097f30aba261fa49e2f47db183824f826c6073a1a5e3532a3a4d8b5b804a973c9e3a57d3896bb19a7f2e189ceb181aa28dd76c06e4afc20d8b1e7c2dce37239f438e8fbef1d76713c41d1fd17bab73386e2bf3fc29805b4e2fd191b92d2f4180f0f52cbf97318d650974158b77f878a51f30e19214a3d8be44d8217f2a8c6d14d7467d0b99d7ac825a3d80d19dfc12894cae9c5b733cb5e4337a71da42e5f9e5"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x202, 0x4000000000dc) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f00000000c0), 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x3, @dev={0xfe, 0x80, [], 0x36}, @dev={0xfe, 0x80, [], 0xd}, 0x1, 0x20, 0x0, 0x8}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000a00)={@dev, @dev}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004000) [ 621.052072][T20514] MINIX-fs: get root inode failed 01:01:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0\x00', 0x0}) 01:01:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 01:01:52 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103005cf9535fc0010000e8c2645fe9c2645fe9c2645f44000000000000000000000000000000000000000000000000000000000000000000000000000000ed4102", 0x7c3, 0x880}, {&(0x7f0000010c00)="010000002e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002e2e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000066696c6530", 0x89}], 0x80, &(0x7f0000000040)=ANY=[]) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 01:01:52 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xe000, 0x0) [ 621.409849][T20540] loop4: detected capacity change from 8 to 0 [ 621.435252][T20540] Unable to read inode block [ 621.445914][T20540] MINIX-fs: get root inode failed [ 766.868106][ T1653] INFO: task syz-executor.5:20503 can't die for more than 143 seconds. [ 766.876440][ T1653] task:syz-executor.5 state:D stack:27312 pid:20503 ppid: 8633 flags:0x00004004 [ 766.937780][ T1653] Call Trace: [ 766.941211][ T1653] __schedule+0x8cd/0x2150 [ 766.945775][ T1653] ? io_schedule_timeout+0x140/0x140 [ 766.966723][ T1653] ? mark_held_locks+0x9f/0xe0 [ 766.973402][ T1653] ? rwlock_bug.part.0+0x90/0x90 [ 766.980329][ T1653] schedule+0xcf/0x270 [ 766.984577][ T1653] rwsem_down_write_slowpath+0x7e5/0x1200 [ 767.008608][ T1653] ? rwsem_mark_wake+0x830/0x830 [ 767.013733][ T1653] ? lock_release+0x710/0x710 [ 767.020448][ T1653] down_write+0x132/0x150 [ 767.024982][ T1653] ? down_write_killable_nested+0x170/0x170 [ 767.047801][ T1653] ? get_mountpoint+0x3e0/0x3e0 [ 767.052833][ T1653] lock_mount+0x8a/0x2e0 [ 767.057135][ T1653] path_mount+0x1678/0x1e70 [ 767.077808][ T1653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.084341][ T1653] ? strncpy_from_user+0x2a0/0x3e0 [ 767.098016][ T1653] ? finish_automount+0xac0/0xac0 [ 767.103174][ T1653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.127782][ T1653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.134458][ T1653] __x64_sys_mount+0x27f/0x300 [ 767.157778][ T1653] ? copy_mnt_ns+0xae0/0xae0 [ 767.162608][ T1653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.170972][ T1653] do_syscall_64+0x2d/0x70 [ 767.175531][ T1653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 767.197769][ T1653] RIP: 0033:0x45e219 [ 767.201785][ T1653] RSP: 002b:00007f3acdcbac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.228623][ T1653] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 767.257806][ T1653] RDX: 0000000020002100 RSI: 00000000200020c0 RDI: 0000000000000000 [ 767.266608][ T1653] RBP: 000000000119bfd0 R08: 0000000020002140 R09: 0000000000000000 [ 767.287816][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 767.296670][ T1653] R13: 00007ffdb0c33fef R14: 00007f3acdcbb9c0 R15: 000000000119bf8c [ 767.317829][ T1653] INFO: task syz-executor.5:20503 blocked for more than 143 seconds. [ 767.326776][ T1653] Not tainted 5.10.0-next-20201223-syzkaller #0 [ 767.379094][ T1653] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 767.397945][ T1653] task:syz-executor.5 state:D stack:27312 pid:20503 ppid: 8633 flags:0x00004004 [ 767.407532][ T1653] Call Trace: [ 767.418347][ T1653] __schedule+0x8cd/0x2150 [ 767.422936][ T1653] ? io_schedule_timeout+0x140/0x140 [ 767.447828][ T1653] ? mark_held_locks+0x9f/0xe0 [ 767.453552][ T1653] ? rwlock_bug.part.0+0x90/0x90 [ 767.467837][ T1653] schedule+0xcf/0x270 [ 767.472397][ T1653] rwsem_down_write_slowpath+0x7e5/0x1200 [ 767.480691][ T1653] ? rwsem_mark_wake+0x830/0x830 [ 767.485858][ T1653] ? lock_release+0x710/0x710 [ 767.492549][ T1653] down_write+0x132/0x150 [ 767.497115][ T1653] ? down_write_killable_nested+0x170/0x170 [ 767.505529][ T1653] ? get_mountpoint+0x3e0/0x3e0 [ 767.516628][ T1653] lock_mount+0x8a/0x2e0 [ 767.528238][ T1653] path_mount+0x1678/0x1e70 [ 767.533373][ T1653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.551820][ T1653] ? strncpy_from_user+0x2a0/0x3e0 [ 767.557333][ T1653] ? finish_automount+0xac0/0xac0 [ 767.575149][ T1653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.586372][ T1653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.603931][ T1653] __x64_sys_mount+0x27f/0x300 [ 767.612603][ T1653] ? copy_mnt_ns+0xae0/0xae0 [ 767.617269][ T1653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.634822][ T1653] do_syscall_64+0x2d/0x70 [ 767.644395][ T1653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 767.664801][ T1653] RIP: 0033:0x45e219 [ 767.674410][ T1653] RSP: 002b:00007f3acdcbac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.696430][ T1653] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 767.716988][ T1653] RDX: 0000000020002100 RSI: 00000000200020c0 RDI: 0000000000000000 [ 767.726703][ T1653] RBP: 000000000119bfd0 R08: 0000000020002140 R09: 0000000000000000 [ 767.745372][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 767.768985][ T1653] R13: 00007ffdb0c33fef R14: 00007f3acdcbb9c0 R15: 000000000119bf8c [ 767.787894][ T1653] INFO: task syz-executor.5:20507 can't die for more than 144 seconds. [ 767.809816][ T1653] task:syz-executor.5 state:R running task stack:26664 pid:20507 ppid: 8633 flags:0x00004006 [ 767.832315][ T1653] Call Trace: [ 767.836002][ T1653] __schedule+0x8cd/0x2150 [ 767.847456][ T1653] ? lock_release+0x710/0x710 [ 767.863856][ T1653] ? ilookup5_nowait+0x7e/0xb0 [ 767.874355][ T1653] ? ilookup5_nowait+0x8d/0xb0 [ 767.887922][ T1653] preempt_schedule_common+0x45/0xc0 [ 767.893481][ T1653] ? preempt_schedule_thunk+0x16/0x18 [ 767.913442][ T1653] ? _raw_spin_unlock+0x36/0x40 [ 767.926175][ T1653] ? ilookup5_nowait+0x6f/0xb0 [ 767.936032][ T1653] ? fuse_init_file_inode+0x1e0/0x1e0 [ 767.951886][ T1653] ? iget5_locked+0x41/0x220 [ 767.964284][ T1653] ? fuse_inode_eq+0x80/0x80 [ 767.975139][ T1653] ? fuse_iget+0x271/0x610 [ 767.986823][ T1653] ? fuse_change_attributes+0x610/0x610 [ 768.004457][ T1653] ? fuse_simple_request+0x3e8/0xd10 [ 768.012852][ T1653] ? fuse_lookup_name+0x447/0x630 [ 768.029925][ T1653] ? fuse_create+0x30/0x30 [ 768.036953][ T1653] ? find_held_lock+0x2d/0x110 [ 768.053053][ T1653] ? fuse_lookup.part.0+0xdf/0x390 [ 768.063905][ T1653] ? fuse_lookup_name+0x630/0x630 [ 768.087978][ T1653] ? lockdep_init_map_waits+0x26a/0x720 [ 768.094151][ T1653] ? fuse_lookup+0x70/0x90 [ 768.111722][ T1653] ? __lookup_slow+0x24c/0x480 [ 768.122608][ T1653] ? page_put_link+0x210/0x210 [ 768.134039][ T1653] ? inode_permission.part.0+0xab/0x410 [ 768.147293][ T1653] ? walk_component+0x418/0x6a0 [ 768.167831][ T1653] ? handle_dots.part.0+0x1520/0x1520 [ 768.174462][ T1653] ? walk_component+0x6a0/0x6a0 [ 768.187919][ T1653] ? path_lookupat+0x1ba/0x830 [ 768.193391][ T1653] ? filename_lookup+0x19f/0x560 [ 768.207149][ T1653] ? may_linkat+0x2b0/0x2b0 [ 768.214359][ T1653] ? __check_object_size+0x171/0x3f0 [ 768.228165][ T1653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 768.238343][ T1653] ? strncpy_from_user+0x2a0/0x3e0 [ 768.243729][ T1653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.264446][ T1653] ? getname_flags.part.0+0x1dd/0x4f0 [ 768.276326][ T1653] ? __x64_sys_name_to_handle_at+0x177/0x240 [ 768.295088][ T1653] ? do_sys_name_to_handle+0x4c0/0x4c0 [ 768.306530][ T1653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.327856][ T1653] ? do_syscall_64+0x2d/0x70 [ 768.333837][ T1653] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.350013][ T1653] [ 768.350013][ T1653] Showing all locks held in the system: [ 768.369487][ T1653] 3 locks held by kworker/u4:0/9: [ 768.374697][ T1653] #0: ffff8880b9f34c58 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x2150 [ 768.388003][ T1653] #1: ffffc90000ce7da8 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15f0 [ 768.402566][ T1653] #2: ffffffff8b363660 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xf3/0xe50 [ 768.415285][ T1653] 1 lock held by khungtaskd/1653: [ 768.424039][ T1653] #0: ffffffff8b363660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 768.438024][ T1653] 1 lock held by in:imklog/8181: [ 768.443210][ T1653] #0: ffff8880236594f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 768.453497][ T1653] 1 lock held by syz-executor.5/20503: [ 768.459777][ T1653] #0: ffff888031f69590 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: lock_mount+0x8a/0x2e0 [ 768.476923][ T1653] 2 locks held by syz-executor.5/20507: [ 768.488214][ T1653] [ 768.490681][ T1653] ============================================= [ 768.490681][ T1653] [ 768.507021][ T1653] NMI backtrace for cpu 0 [ 768.511773][ T1653] CPU: 0 PID: 1653 Comm: khungtaskd Not tainted 5.10.0-next-20201223-syzkaller #0 [ 768.521121][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.531500][ T1653] Call Trace: [ 768.534925][ T1653] dump_stack+0x107/0x163 [ 768.539339][ T1653] nmi_cpu_backtrace.cold+0x44/0xd7 [ 768.544897][ T1653] ? lapic_can_unplug_cpu+0x80/0x80 [ 768.550328][ T1653] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 768.557606][ T1653] watchdog+0xd89/0xf30 [ 768.561990][ T1653] ? trace_sched_process_hang+0x280/0x280 [ 768.568160][ T1653] kthread+0x3b1/0x4a0 [ 768.573563][ T1653] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 768.579507][ T1653] ret_from_fork+0x1f/0x30 [ 768.585868][ T1653] Sending NMI from CPU 0 to CPUs 1: [ 768.594484][ C1] NMI backtrace for cpu 1 [ 768.594496][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.10.0-next-20201223-syzkaller #0 [ 768.594508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.594518][ C1] Workqueue: phy10 ieee80211_iface_work [ 768.594531][ C1] RIP: 0010:__lock_acquire+0xc0c/0x5500 [ 768.594549][ C1] Code: 00 00 48 8d 1c 5b 48 c1 e3 06 48 81 c3 c0 2b be 8e 48 8d 7b 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 b7 47 00 00 48 83 7b 40 00 0f 84 4a 0d 00 00 0f b7 44 24 38 [ 768.594566][ C1] RSP: 0018:ffffc90000ce7140 EFLAGS: 00000046 [ 768.594578][ C1] RAX: dffffc0000000000 RBX: ffffffff8ebe2bc0 RCX: ffffffff815838b6 [ 768.594587][ C1] RDX: 1ffffffff1d7c580 RSI: 0000000000000008 RDI: ffffffff8ebe2c00 [ 768.594597][ C1] RBP: ffff888010d60000 R08: 0000000000000000 R09: ffffffff8ebe27a7 [ 768.594606][ C1] R10: fffffbfff1d7c4f4 R11: 0000000000000000 R12: ffff888010d60a08 [ 768.594615][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 768.594625][ C1] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 768.594634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.594642][ C1] CR2: 00007f392f7d5020 CR3: 0000000025d5f000 CR4: 00000000001506e0 [ 768.594651][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 768.594660][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 768.594668][ C1] Call Trace: [ 768.594673][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 768.594680][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 768.594687][ C1] lock_acquire+0x29d/0x740 [ 768.594693][ C1] ? debug_check_no_obj_freed+0xc7/0x420 [ 768.594699][ C1] ? lock_release+0x710/0x710 [ 768.594705][ C1] ? kthread+0x3b1/0x4a0 [ 768.594711][ C1] ? ret_from_fork+0x1f/0x30 [ 768.594717][ C1] ? ieee80211_update_bss_from_elems+0x893/0xf20 [ 768.594724][ C1] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 768.594731][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 768.594738][ C1] ? debug_check_no_obj_freed+0xc7/0x420 [ 768.594745][ C1] debug_check_no_obj_freed+0xc7/0x420 [ 768.594752][ C1] ? slab_free_freelist_hook+0xdd/0x1d0 [ 768.594758][ C1] slab_free_freelist_hook+0x12b/0x1d0 [ 768.594765][ C1] kfree+0xe5/0x5c0 [ 768.594770][ C1] ? unpoison_range+0x3a/0x60 [ 768.594776][ C1] ? ieee802_11_parse_elems_crc+0xa65/0xf00 [ 768.594783][ C1] ieee802_11_parse_elems_crc+0xa65/0xf00 [ 768.594790][ C1] ? find_held_lock+0x2d/0x110 [ 768.594796][ C1] ? mark_lock+0xf7/0x1730 [ 768.594802][ C1] ? lock_chain_count+0x20/0x20 [ 768.594808][ C1] ? mark_held_locks+0x9f/0xe0 [ 768.594814][ C1] ? ieee80211_wake_vif_queues+0x40/0x40 [ 768.594821][ C1] ? __local_bh_enable_ip+0xb8/0x110 [ 768.594828][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 768.594837][ C1] ? cfg80211_put_bss+0x1b0/0x270 [ 768.594844][ C1] ? __local_bh_enable_ip+0x9c/0x110 [ 768.594851][ C1] ieee80211_rx_mgmt_probe_beacon+0x188/0x16b0 [ 768.594858][ C1] ? __lock_acquire+0x16b7/0x5500 [ 768.594864][ C1] ? ieee80211_ibss_add_sta+0x750/0x750 [ 768.594871][ C1] ? unwind_next_frame+0xe3b/0x1f90 [ 768.594877][ C1] ? arch_stack_walk+0x5c/0xe0 [ 768.594883][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 768.594890][ C1] ? mark_lock+0xf7/0x1730 [ 768.594896][ C1] ? lock_chain_count+0x20/0x20 [ 768.594902][ C1] ? lock_chain_count+0x20/0x20 [ 768.594908][ C1] ? mark_lock+0xf7/0x1730 [ 768.594914][ C1] ieee80211_ibss_rx_queued_mgmt+0xe3e/0x1870 [ 768.594921][ C1] ? __lock_acquire+0x16b7/0x5500 [ 768.594927][ C1] ? ieee80211_ibss_rx_no_sta+0x840/0x840 [ 768.594935][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 768.594941][ C1] ? mark_lock+0xf7/0x1730 [ 768.594947][ C1] ? lock_chain_count+0x20/0x20 [ 768.594953][ C1] ? find_held_lock+0x2d/0x110 [ 768.594960][ C1] ? ieee80211_iface_work+0x362/0x9e0 [ 768.594966][ C1] ? mark_held_locks+0x9f/0xe0 [ 768.594973][ C1] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 768.594980][ C1] ieee80211_iface_work+0x761/0x9e0 [ 768.594987][ C1] process_one_work+0x98d/0x15f0 [ 768.594993][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 768.594999][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 768.595006][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 768.595012][ C1] worker_thread+0x64c/0x1120 [ 768.595018][ C1] ? process_one_work+0x15f0/0x15f0 [ 768.595024][ C1] kthread+0x3b1/0x4a0 [ 768.595030][ C1] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 768.595037][ C1] ret_from_fork+0x1f/0x30 [ 769.247149][ T1653] Kernel panic - not syncing: hung_task: blocked tasks [ 769.254569][ T1653] CPU: 1 PID: 1653 Comm: khungtaskd Not tainted 5.10.0-next-20201223-syzkaller #0 [ 769.264562][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.275365][ T1653] Call Trace: [ 769.278682][ T1653] dump_stack+0x107/0x163 [ 769.283055][ T1653] panic+0x306/0x73d [ 769.287240][ T1653] ? __warn_printk+0xf3/0xf3 [ 769.293452][ T1653] ? lapic_can_unplug_cpu+0x80/0x80 [ 769.298789][ T1653] ? preempt_schedule_thunk+0x16/0x18 [ 769.304891][ T1653] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 769.312419][ T1653] ? watchdog.cold+0x22d/0x248 [ 769.318154][ T1653] watchdog.cold+0x23e/0x248 [ 769.323140][ T1653] ? trace_sched_process_hang+0x280/0x280 [ 769.331357][ T1653] kthread+0x3b1/0x4a0 [ 769.335970][ T1653] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 769.342436][ T1653] ret_from_fork+0x1f/0x30 [ 769.348168][ T1653] Kernel Offset: disabled [ 769.353231][ T1653] Rebooting in 86400 seconds..