2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) 00:49:16 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xff000000}, 0x0) 00:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2192.173842][ T3657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2192.210903][ T3673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:16 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/46, 0x2e}, {&(0x7f00000011c0)=""/180, 0xb4}, {&(0x7f0000001280)=""/253, 0xfd}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/122, 0x7a}], 0x9, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/73, 0x49}, {&(0x7f0000002580)=""/40, 0x28}, {&(0x7f00000025c0)=""/227, 0xe3}, {&(0x7f00000026c0)=""/84, 0x54}, {&(0x7f0000002740)=""/97, 0x61}], 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$KDENABIO(r1, 0x4b36) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = fcntl$dupfd(r2, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r5, 0x20000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r6, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:16 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 00:49:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r2, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) [ 2192.241401][ T3681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2192.273185][ T3686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2192.314750][ T3692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2192.329175][ T3698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2192.459561][ T5] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2192.699403][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2192.819429][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2192.830191][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.841822][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.852003][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2192.865326][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2192.874790][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.883834][ T5] usb 5-1: config 0 descriptor?? [ 2193.619399][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2193.625345][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2193.633607][ T5] usb 5-1: USB disconnect, device number 52 00:49:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:18 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffff80fe}, 0x0) 00:49:18 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x4000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r2, 0x29, 0x2, 0x0, &(0x7f0000000180)=0x38) r3 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x7fca, 0x191540) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x40) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0)=r7, 0x12) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:49:18 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_group_source_req(r3, 0x0, 0x19, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r5 = creat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)) 00:49:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r3, r4, 0x8}, 0x10) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r6) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_VL_CLR(r7, 0x7014) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000000)={0x1, 0x1c5372e5, 0x80000001, 0x10000, 0x4, 0x7}) ftruncate(0xffffffffffffffff, 0x0) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000140)={0x7, 0x7fffffff, 0x0, 0x7}) 00:49:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='syz') ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r2}, 0x9, 0x2}) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x0) remap_file_pages(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x6, 0x6, 0x10000) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000240)={{0x2, 0x0, @identifier="dfd2c74616ec03183f9cbece17bdc988"}}) keyctl$set_timeout(0xf, r3, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000180)=""/181, 0xb5) 00:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x4010, r0, 0x0) ftruncate(r0, 0x40) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101040, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@remote}, &(0x7f00000000c0)=0x14) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x0, 0xc1, 0x6, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r3, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:18 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffc0fe}, 0x0) [ 2194.094619][ T3718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2194.118369][ T3721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2194.195792][ T3733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2194.236975][ T3736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2194.359430][ T5] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2194.629380][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2194.749447][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2194.760157][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.771718][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.781906][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2194.795307][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2194.804879][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.814006][ T5] usb 5-1: config 0 descriptor?? [ 2195.559432][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2195.565412][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2195.573269][ T5] usb 5-1: USB disconnect, device number 53 00:49:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:20 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x9, 0x523480) fcntl$setstatus(r0, 0x4, 0x40000) creat(&(0x7f00000001c0)='./bus\x00', 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x149100, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000300)={0x283, 0x5}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x810000001, 0x20000000204, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="3b1982021e7a5da83b6774524dbcb593ce4f34cafbc11f459af85b793dc0b985ca1993fa01515b630fefa11d84ba5faecb0ae614387a49d503c8564dc5248a1eac66c375186a01671f14383cfdd157ec75e8fdd3", 0x54, 0x20008005, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) write$P9_RLOCK(r8, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x800) ioctl$CHAR_RAW_PG(r9, 0x1269, &(0x7f0000000340)={0x1, 0x3, 0x0, &(0x7f0000000280)}) 00:49:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) poll(&(0x7f0000000040)=[{r1, 0x8}, {r2, 0x1008}, {r4, 0x84}, {r5, 0x148}, {r6, 0x4}, {r9, 0x2}], 0x6, 0x1) 00:49:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ptrace$cont(0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000240)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r9, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008040) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000200)=0x40, 0x4) ftruncate(0xffffffffffffffff, 0x0) 00:49:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000600)='/dev/rtc#\x00', 0x401, 0x414040) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) io_submit(0x0, 0x9, &(0x7f0000001900)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)="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", 0xff, 0x2, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xe91f, r0, &(0x7f0000000280)="c563e7688617e09dd35e504ca294dc6b7fe013000a4b550912e46b3319115c7e8355ac2601a423d453dc8f47d6245243846e8fce72e1a6a5e8be97eb72ad412d70673e10118057834d70c1422d0b46e486cdbd6d776ce9f2859b80000b27bf08e1ba713134e2d62ef7fc91d5f1c58a67809b0923f80fa261c9946a98c90d92f1ea4126dc5b8181cc", 0x88, 0x7, 0x0, 0x1, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f00000000c0)="bcab937d07a752061398fffa9a1f6e0a9563a34f7886471676e6f0239c2f635d", 0x20, 0x100000001, 0x0, 0x3, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x42a, r3, &(0x7f0000000340)="2f982be40179b03cfc3d979ff47b2a1df1fe13d9a96e70351889801c2cc0c2d29db31efc5aa8722cc60b8fdff8e6a58f0417d5680ed64d87fef32356567522c0aa4f2fcbdc24b22245585b58f3b3b00a8dcbce4ba74bdfbd62c4df3d20fb72bdabeff2581c93dce885cb6cf0068caf100a1ffcdbe6deeb73569038dde6b20a9a9c0763837d3e838cab3e91ca3762cf71d0acb924d3c0ba2091457bcb842a", 0x9e, 0x4fcc1798, 0x0, 0x1, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x5, r5, &(0x7f0000000440)="df414345ef1e186f307302dc372a11d333241dc44da5b1288b3f83cfc9e35e7c6643e32ed5b7b827db4ebc7fcf16b6f7c39c88574faa1bc387151c622fb3f47d1fff17838f7c827d1be1086ee53b983d556fbbd31a2b21f0e9bd593df39a22c8d108025f8255476dd177487e8ad5df9aef5e72d8709162fc2b34d6741ac5700752d3f42bc19c3c6ee616b5eadd8d1585f777376b361319b28a9db9402f1d53437970c75d9d60341b6e69a4f86a68d0c5496c643ed34ab021124774eb2571f7e7a047fac11e4a332a657720297a9fe509e22455e13b9c9b2ab0ea4b8fe308f102141c26", 0xe3, 0x98d7, 0x0, 0x2, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000580), 0x0, 0x3, 0x0, 0x3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x81, r7, &(0x7f0000000640)="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", 0x1000, 0x4, 0x0, 0x3, r0}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x6, 0x16, r0, &(0x7f0000001680)="6114d2985c1039612ac2089efc6c8cc22febe831ebf9ff8f1d60c16926f32b98ed169b532d6194f99d8a1efcf9914198002bca3273d050ce46997e903dce57b1597f663d2540c782993f6c6ba9e5542e1be884e2c659989bb714473e3b94b3496c7390059ef45705c1323368e09af5a9c0fa4478b609b4036ea35d1431c3e8f22aacece71ee8ea9216ed7b246c8c4e213173cbc77963b512798609e02a28f337a87fb9da442844abd6a4c28cc6b327ce19b6ab618d12", 0xb6, 0x1, 0x0, 0x2, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x7, 0x9, r8, &(0x7f0000001780)="b7a0426a1c1e4c3cb2bd417d1b9577d8f054106365ebaabec2aec1ba902de494c81cb4828833bbd0ced4982b288f2e1194d7e47709332530f6332d289eb860900406623680da8bbefcc8336ee4d1d04c3c5a3e02219562fec19dbd0f57b28a2f94ec2f1d6ce5e58d27e5ae0ccc62d992a0c7a1dbe84ad90685f00cc7e7dbf76e9f1c9e2236473069b32164bc7f7efa30dc547fd768e717560e", 0x99, 0x7, 0x0, 0x2, r0}]) getsockopt$bt_hci(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000140)) 00:49:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 00:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:20 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2, 0xeb6, 0x408a50af, 0x7, 0x1a, "a6653e459a67618911cd86fe07c0c579c9cc1f"}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r3 = gettid() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x5, 0x200, 0x9, 0x7f}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) setpgid(r2, r3) [ 2196.019457][ T3756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2196.041224][ T3766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2196.093621][ T3774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2196.140097][ T3781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2196.279394][T21360] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2196.519337][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2196.639423][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2196.655957][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2196.679408][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.700653][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2196.728663][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2196.748722][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.767749][T21360] usb 5-1: config 0 descriptor?? [ 2197.509418][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2197.515382][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2197.523076][T21360] usb 5-1: USB disconnect, device number 54 00:49:22 executing program 4: syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getpeername$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x3) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffe0}, 0x0) 00:49:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$hidraw(r1, &(0x7f0000000040)="04513678ccc545104f6e22c53fbbdbad62cab777f04ab616e49ad04c47a35c4e4eef3d5689d8ae93c141474b0315b0c9f7e48412a53c71cae54fd8322e785f711b073469cd79f7af9648e5aa71442de8d3afaf2ebffc11ae7e2abc03d7cbf91e0e0a7a7989afc189e55d5a6b7b809b191e4db3b5199d3c2d674d7be76f9d1850a8d8aa38ccc429e4588c118ccae17ba0c01936fe5672db1fee0fdd1b06e5dcfa6951dc0b7259b942c40af1e1d267f1cbf51b864170b8", 0xb6) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = timerfd_create(0x9, 0x80000) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl(r3, 0x7, &(0x7f0000000100)="79c128af5293e6262545d57282e344e673ee903ffc197012087fc18a142332d8df250973f619f15e7950d5e86b947325e415031c08f7945585d62d6d5cb23d3c1324db096f74d94def9459ac96b2c75dca4bb227105c8807cb4d99fb3d4627f542f55de2a63c3a8d7c301f8b3724a4d4b1991e") ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xfff, 0x80000000}) 00:49:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x48000) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20068085}, 0x4) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc091}, 0x4054) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r10 = dup2(r0, r9) r11 = dup2(r9, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r3, 0x80000000000003f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r4, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x6, 0x20000000201}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x5) ioctl$KDFONTOP_COPY(r8, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x17, 0xb, 0xa3, &(0x7f0000000200)}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') fcntl$dupfd(r7, 0x0, r6) r9 = dup2(r4, r6) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r11 = dup2(r0, r10) dup2(r10, r11) ftruncate(0xffffffffffffffff, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000000c0)=0xff) 00:49:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) accept4$tipc(r6, 0x0, &(0x7f0000000040), 0x80000) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r8 = open(&(0x7f0000000200)='./file0\x00', 0x4000, 0xfa) socket(0x28, 0x4, 0xffffffff) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r8, 0xffffffffffffffff, r9) setgid(r9) write$cgroup_type(r6, &(0x7f0000000000)='threaded\x00', 0xfffffffffffffff6) creat(&(0x7f0000000080)='./bus\x00', 0x13a) 00:49:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffea}, 0x0) 00:49:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2197.981434][ T3797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2198.003884][ T3806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2198.079616][ T3822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2198.100692][ T3826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:22 executing program 4: syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x405, r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20c02, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r6, 0x12) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) ftruncate(r0, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r7, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 00:49:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 00:49:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1f, 0x101280) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x88, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}}, 0x2800) 00:49:22 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x1, 0x3, &(0x7f0000000200)=[{}, {}, {}], 0x0, &(0x7f0000000300)={&(0x7f0000000280)={[0x3]}, 0x8}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0xd}]}]}]}, 0x38}}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) ioctl$KDGKBSENT(r8, 0x4b48, &(0x7f0000000680)={0x9, "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"}) r9 = dup2(r0, r7) r10 = dup2(r7, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getparam(r11, &(0x7f0000000140)) [ 2198.500616][ T3838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:49:22 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2198.553562][ T3851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2198.604356][ T3863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2198.614819][ T3869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:23 executing program 4: syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x200, 0x8000, 0x4}) ioctl$CHAR_RAW_PG(r2, 0x1269, &(0x7f0000000040)={0x2, 0x1, 0xdc, &(0x7f0000000180)="489f86cf7205bf3ad72f854bfd2d04d7f8cc2a90d4a252976e31644c379035c85be181a63cd8c023f78ba1b7d174ee0b04d971acebc386d223a86106e7ae4843f4b0ea9c7a28a0dc4e0b28345677d078741cf2274cd85ff11ba0b673d52b56f384606f6af4337a8b6796ca010a67963ad3eebc8c97ab08596c6d687f74382ca3263a2cb156e5e7d0a8b12081d829e108e11c2cc512f58c082860e10851e63ebacbb5a00631f5569095eb2a2a4d3a8311c5720d3e4ff209f2a24e8bba5788ac065fb815237c7c510ea42369ed595ddd0fe831c71d65ee91fddb56dbd4"}) 00:49:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 00:49:23 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) futimesat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) 00:49:23 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) 00:49:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) r6 = dup2(r4, r5) r7 = eventfd2(0x6, 0x1000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 2: geteuid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x105b, 0xff, 0xa4, 0xbc}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x29, 0x3c, 0x0, &(0x7f0000000140)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) 00:49:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2) [ 2199.059237][ T3885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2199.093963][ T3892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) ppoll(&(0x7f0000000000)=[{r0, 0x1184}, {0xffffffffffffffff, 0x2000}, {r4, 0x2}, {r1, 0x8000}, {r0, 0x1000}, {r6, 0x111}], 0x6, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x2]}, 0x8) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r8 = dup2(r1, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r10 = dup2(r0, r9) r11 = dup2(r9, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2199.146578][ T3904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2199.167830][ T3908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x3) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xda4, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) 00:49:23 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) write$binfmt_aout(r3, &(0x7f0000000a00)={{0x108, 0xf9, 0x40, 0x2d9, 0x188, 0x8, 0x145, 0x8}, "a3a950aa8d50abfdd930b64b60f5c2dccbc75ec5e482812fbde6ede7bb2b51e2101889f5e872579d91b357759d3f3ae45d09135091e9bc0b8b81ebd2625f1d4d140a0d0c18aae59db9ae6061eed165739d507aa1949c7a58c6edbce53948a2bd64769ef1c77760bd784783462d57a3afa6ae2d06f211db7de0de7de5f90929fa12dc71349ffa50b670ba7fd95ab81edb0a10dc2d9cdf4e1834aec3659fe129947f30ae7e3a7d798ba8e5f9ba7d25cc6e81bad137823720f92b", [[], [], [], [], [], []]}, 0x6d9) close(r2) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, 0x0}]) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f00000000c0)="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", 0xfc, 0x8, 0x0, 0x1, r0}, &(0x7f0000000240)) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x80, 0x20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffa, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ftruncate(r4, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a00)=""/4096, 0x1000) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x14) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000000)) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) getpid() getsockopt$bt_hci(r5, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000000)={0x2, 0xfffffffc, 0x1, 0xffffff9a, 0x958, 0x800}) r7 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x5) 00:49:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2199.637042][ T3937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2199.661266][ T3939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0xa746, 0x7ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:24 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6) 00:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x20180, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x8000, 0x20000000200, 0x1, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x0) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024c, 0x2000000020d}) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x2) fcntl$dupfd(r5, 0x0, r4) dup2(r4, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007fa, 0x20000000229}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x0) 00:49:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x17}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10000}]}, 0x54}}, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5020000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @multicast1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048040}, 0x20004000) ftruncate(r0, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r7, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0xac, 0x21, 0x300, 0x70bd27, 0x25dfdbfb, "", [@generic="c0c79ef8cc87abe4551956766a4291a63dc8855ba71f5f343ffc079d0e28b71d97c8a08f72bd7b1e552921b728b8f7aaf2dc87b0a7bf890c397c0deab523df2fb46beeadcd5b85e9eeeba1154c183d3c5c7b19f3a701ca3f09d4f1fcf3ec606f635c07a5efdcf58a5c17dc66f5b2b5f4ae6111e0df4021e497544ea817af8fa5e53ec6516390e8f8b437f2d24cb8299f8abb67a684f4fc1df987"]}, 0xac}, {&(0x7f00000002c0)={0x34c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1e3, 0x16, 0x0, 0x1, [@generic="047ef3eec3c21e09afdc84848654dadf8f72df52a4ea74cde694daa86e284b14255ca5c8474864a170c94af9ac2459be631553e6bc7cab83d035acfcceee6c6f9736ec8f529ecff4c55fbe55d22f75141b2a310d35db8557e353e6379612eb8034ecf00de26c56d06d5fd0807eb8f13494f7f34a3a80a508f013ab42639595873685bbc850454e20e6b009b477c39b7da5f4f98ad743f2dcea643cae959723f5e9", @generic="f537534954b4c4945d2b98551b1e5a734e8546cc03fc3d964973ad8455cfeac4966aa6787cc1687f67de5cdd1c21fa69d4181b2099f544cde6e0147dc08dc3e84e0d", @generic="d02043bb0269568dc1cf3ac0f21f27041bd9e271ce194b8257d53f452b2f6411d2cbc7ac6880b1f8d70d444c170fa062a6a5e82c3a5048eec0be733a019a8a7392be2c9f580095204dbd2508a67d442c883967399d208ebcc4ce99672095c37c7bf1491496c690ed", @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@remote}, @generic="c759ea6cfd77234a7188708b11b8630054066816768d78ca2b34cac512476e3e65ae02e43f1b35d01bf75113e581581f7b8fee3d1ba792955ecdce3a06bf379b36535d9e99fb4a987baa9d34321da1b9510b96c7c606d0d21abd7fe2c00d13c94c50d635ee8b8c097713575e62a835ff9f30851774d401ab576a09f4a8f5595e"]}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}, @typed={0x4, 0x43}, @generic="f7a24ae43c741dce86876d6fc91c09dd68fbbbdd1222663dc7f9f3dc1d18e59c844306fe92fe77746f0252a5ca58d73e567e9461bbbe4f365f66ff4e138e043fa95cd228f95dca27a7e681f8256f2ba6a362f2ceea4ea77b28ce4994a8fbba7bbdc32243ac41038617c03107a73ca065bce65a4d59f01be2522eed065c1351ba01757fba9d63f03bb530c12ffa13e3f17e13d08836087c14c6b9efe03b0d4f90a426e7", @typed={0x8, 0x94, 0x0, 0x0, @pid}, @generic="5f54cfddd666481a0a3037f8e0bef389872995f55630f6f08abd91f16d42809c7f72de7f9d7aa68f41e3dbbcb791e22aa04521e729b54213fa365bd46dc8c7624a8eea9eee94f146b7c0400ac4c894a429d181f113e2e1e454a28b119d9a83a7cf2e305e185fecad78952bb49463681db48510f69a5d7bad7646d1125ed348c2c9b85df5bd4393ebd190a4a7d90d593fd9d40ce45fb6a24a74", @typed={0x8, 0x41, 0x0, 0x0, @str='#-]\x00'}]}, 0x34c}, {&(0x7f0000000680)={0x1214, 0x31, 0x2, 0x70bd27, 0x25dfdbfc, "", [@typed={0xd, 0x75, 0x0, 0x0, @str='/dev/ion\x00'}, @nested={0x1010, 0x92, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @uid=r7}, @typed={0x1004, 0x51, 0x0, 0x0, @binary="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"}]}, @generic="b670b802065edd79f4f2fec56c406c8ec33c0d5c20e777d0084293a47a4472cc8937d7cfa57f9ebd4e36c6199397c55d1a95eb51ea091cc35300193cf8bb1260beb7249dc8e8c47d422b80e659cb148d5a1c8610f528df181d69530a14115e12ae5e1ddab4988a3c72e0b4208ec70de3e5112301aa4c6311769ae7221eec39f181316bc3cf4d4f481078b04f510ebf1e46f3802b418df326c7bfd5306f", @nested={0x56, 0x78, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x60, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="37fac1570b1623a3e880e5d5aa63250195786714d3140c70095db98fb82378d8e3392b8af85f365ac05dbf9d38dea3a425de", @typed={0x8, 0x34, 0x0, 0x0, @u32=0xea36}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@local}]}, @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@private0}, @typed={0xd7, 0x30, 0x0, 0x0, @binary="fc981e8c44415d48925a126d40764bd8a32b0ec44f69a8d3d6b5cc3422b57f2864d14b3507077c39a63afc280d141108eb9074c145c77cba8ba8ae3ed765f2168bdc77f7bf488e91c7938392614ee378edf09ea0886198746dd914df65f370d9c8267611f92ee33d47f1d503e10854d5066eaecf60c9a516eade15bc3892c6d192b920dbdbff446139ee528e67426ba77a8662d7d41b99b2bd5947b611ea35ffeb9cc46eadf7742235a5f1928488abae19fbc04724a9ad2e3829004e543a6870a34d0e3600967fab8920fd2b84936aae9be991"}]}, 0x1214}], 0x3, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10, 0x10}, 0x100) r11 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$dupfd(r5, 0x406, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) r8 = fcntl$dupfd(r2, 0x0, r7) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x161043, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000000)='$O\\{,+\x1a[\x8f-(%$\x00', 0x0, r9) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:24 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = signalfd4(r0, &(0x7f0000000040)={[0x83d]}, 0x8, 0x80000) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x6) getsockopt$bt_hci(r3, 0x29, 0x1, 0x0, &(0x7f0000000140)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x40011, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x44e9, 0x4476, 0x0, &(0x7f0000000000)={[0x41]}, 0x8) [ 2200.149381][ T3966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2200.188398][ T3979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:24 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7) 00:49:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) r4 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000080601010000000000000000050000090900020073797a300000000005000100070000000900020073797a300000000005000100070000000900020073797a30000000003b282978d7ca"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$CHAR_RAW_ROGET(r5, 0x125e, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = eventfd(0x3c71) socket$nl_audit(0x10, 0x3, 0x9) write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r2, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:25 executing program 5: creat(&(0x7f00000001c0)='./bus\x00', 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:49:25 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x8) 00:49:25 executing program 5: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000000)=""/24, 0x18) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x301000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r4, 0x1) r5 = open(&(0x7f0000000040)='./bus\x00', 0x34083, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000080)) r6 = creat(&(0x7f0000000140)='./bus/file0\x00', 0xc1) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:25 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = fsmount(r0, 0x1, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00050000600600110007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4002000}, 0x8804) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x670082, 0x8) write$P9_RLERROR(r6, &(0x7f0000000080)={0xb, 0x7, 0x2, {0x2, '!-'}}, 0xb) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x101000) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r2, 0x29, 0x3c, 0x0, &(0x7f0000000140)=0xfffffd30) 00:49:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:49:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0xac, 0x21, 0x300, 0x70bd27, 0x25dfdbfb, "", [@generic="c0c79ef8cc87abe4551956766a4291a63dc8855ba71f5f343ffc079d0e28b71d97c8a08f72bd7b1e552921b728b8f7aaf2dc87b0a7bf890c397c0deab523df2fb46beeadcd5b85e9eeeba1154c183d3c5c7b19f3a701ca3f09d4f1fcf3ec606f635c07a5efdcf58a5c17dc66f5b2b5f4ae6111e0df4021e497544ea817af8fa5e53ec6516390e8f8b437f2d24cb8299f8abb67a684f4fc1df987"]}, 0xac}, {&(0x7f00000002c0)={0x34c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1e3, 0x16, 0x0, 0x1, [@generic="047ef3eec3c21e09afdc84848654dadf8f72df52a4ea74cde694daa86e284b14255ca5c8474864a170c94af9ac2459be631553e6bc7cab83d035acfcceee6c6f9736ec8f529ecff4c55fbe55d22f75141b2a310d35db8557e353e6379612eb8034ecf00de26c56d06d5fd0807eb8f13494f7f34a3a80a508f013ab42639595873685bbc850454e20e6b009b477c39b7da5f4f98ad743f2dcea643cae959723f5e9", @generic="f537534954b4c4945d2b98551b1e5a734e8546cc03fc3d964973ad8455cfeac4966aa6787cc1687f67de5cdd1c21fa69d4181b2099f544cde6e0147dc08dc3e84e0d", @generic="d02043bb0269568dc1cf3ac0f21f27041bd9e271ce194b8257d53f452b2f6411d2cbc7ac6880b1f8d70d444c170fa062a6a5e82c3a5048eec0be733a019a8a7392be2c9f580095204dbd2508a67d442c883967399d208ebcc4ce99672095c37c7bf1491496c690ed", @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@remote}, @generic="c759ea6cfd77234a7188708b11b8630054066816768d78ca2b34cac512476e3e65ae02e43f1b35d01bf75113e581581f7b8fee3d1ba792955ecdce3a06bf379b36535d9e99fb4a987baa9d34321da1b9510b96c7c606d0d21abd7fe2c00d13c94c50d635ee8b8c097713575e62a835ff9f30851774d401ab576a09f4a8f5595e"]}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}, @typed={0x4, 0x43}, @generic="f7a24ae43c741dce86876d6fc91c09dd68fbbbdd1222663dc7f9f3dc1d18e59c844306fe92fe77746f0252a5ca58d73e567e9461bbbe4f365f66ff4e138e043fa95cd228f95dca27a7e681f8256f2ba6a362f2ceea4ea77b28ce4994a8fbba7bbdc32243ac41038617c03107a73ca065bce65a4d59f01be2522eed065c1351ba01757fba9d63f03bb530c12ffa13e3f17e13d08836087c14c6b9efe03b0d4f90a426e7", @typed={0x8, 0x94, 0x0, 0x0, @pid}, @generic="5f54cfddd666481a0a3037f8e0bef389872995f55630f6f08abd91f16d42809c7f72de7f9d7aa68f41e3dbbcb791e22aa04521e729b54213fa365bd46dc8c7624a8eea9eee94f146b7c0400ac4c894a429d181f113e2e1e454a28b119d9a83a7cf2e305e185fecad78952bb49463681db48510f69a5d7bad7646d1125ed348c2c9b85df5bd4393ebd190a4a7d90d593fd9d40ce45fb6a24a74", @typed={0x8, 0x41, 0x0, 0x0, @str='#-]\x00'}]}, 0x34c}, {&(0x7f0000000680)={0x1214, 0x31, 0x2, 0x70bd27, 0x25dfdbfc, "", [@typed={0xd, 0x75, 0x0, 0x0, @str='/dev/ion\x00'}, @nested={0x1010, 0x92, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @uid=r7}, @typed={0x1004, 0x51, 0x0, 0x0, @binary="9cbf400510bf90f563f04890090852d931e56948065e8018c533098a88274b43b15627bb6fbeb5bbbdf3822dd85c766cba74f5d29b53bf3c2aba7c68b9b2d455e0076d25ac183008281d84b222dc3aa10fc80246697e5f22e370efa11ef32330127cf36ba558aa05151acddf2c74f35eab78fe04e2dc6a3118f0a9efe9cf60111021c16b56a36e85718eef128477ed5dc14e3074f20b338ef686aaa2023d4732cadc7fe62fc31e14855d349689e624807af956270776a2b51299d168e17edf153bf9726344612eb7a4519c0072765f054cb9c4d87c796f2cc6943621d72b82094930abdb36f23e325084b6e4d634ccdc47f425699ae1b91996b2ab7883dadf43bf6e8436229990f7787d6bc2f0e167f46ca38101d8c0040bd4b1d4aab5c9cfff5b2a2ef37827e3291a09fac6612c01f9d67b7e3d4b2ee0d35c83aa8887edaaa483b2ba7f5f82d69df300ec0cda0dff7263ec5b2fbe242950d8ab03f466a4aeb26900556e170b1bb2319d98ec6251a4ad4b3eea979b0bd4d739484ec6cf721b71ee9fac9fe6bd34b51544137d42f6206df3a3d18102ae092801b9ca1d73f881eec8fc2c89a69db3ab74002d0db2241358198b1f14680982a9fb031e913b2119a882530cd96bb7996c7a812108b65e36cbda4f27d651c50c5036ab40299dfd87c4e714a243c0094f029b4b17a45d9c99c0e0469f60434e769dcc84ec90d963a1db2b9bc1b23f1ed4b8ee62180ae334c4e84eeb09c7937eb10e562cabb3d3bdd85a5098ba97200cb7fb363ece40afce4d112338da47bccfcd6e473aa9d203ba7b37711c79d838a66a1ae436268dd81d2b71d8fef737a1c84492eab86b5e8570529b32a4f26bef4f1a8d40203c0dfdb97de097d2495bcd9724e0e53a282014ae94560473f9595550c692cabb75272345ded6e5e37247f3a5fa5e6f92accc2f174b007460c87e9a33b73245856cedf9ae9990b7cb43960706c0971c64a14b00d55426d50df7c56c130e97c3c8e34b052f7fc4218058eeb5d6e8b25d23710bd7177047ed9bbb7e79bf4b7dde25bec5a18b5a48131889954ff497468945ee19e2a4cf649c602cce236263fbfa011a7576fee31bd581c2c928e2d3e651c0cbfa88c24900e1c04e4e29c135565ff22c1d2a33c22514147037118f387e906c60a56c32d89641ce13103afb011df2fe1f8006d096c32c968614b9f1c000cc8faea968b760eae05d341ad132bfbd0f567b5b40ed65bf3fb4a6cb2bf35bee3e15cbf1d6cdb8d80ac6c6c282b0c03feae0018a4c15a86ad282b04488352323157544fd14cdea6188a062d2cac942ed5f5c9e86da2e8aaeedcf9087a3c4838fdd497ad391a86002910d395aa222b8f135b450049ca5839f64bfa492d140ea47e0128eb2bd21a06d64cd203eacea8bfef671a0b301f78463eabe1cbe2d83e84c37a94332bd237a234540a1303302a00c46b653a03ef5fde8efbc7494d7a50b5ffe199356968fa7656fe15b2e80c24e4e6873c88259bf8e234f09969f1335126b019f1cca1ab1f8aa39b75831406191d4c9a710bd4206f2b8dce12e565fb098cea2df8ef9e4a8abc25fee49c6338da9af63e59a92de2d9faed6ea24c798834015eabb094f191947b557f94cc6d7e3ef912d0d567bbf24dedc11e50e8391501e087a94b20444c84d19874b5ae8ebf24f08593c021d1a3f3fc25f7fd8039a0e5b2da6cbbb23f72dcabd53df3b7fd7be52c4af1956778d0f88f8d5db6806f2c7039e2c5dd565b331fc88125d19fae297d3b4035639b1f79bf78651d61513e3a648fb90a33dd0ca4df8f8c4b33db7f1e4b52dd2a3963ce057b431ee88d6a936f399bc71e7025376921cd2f6e682e1a7e63dcf27e16498861653c8e6c7d010046974ab71d97fa099c9067bbf0b88105e5fb2f091c064be5675fa0bc2c24ca726d8a71a1ab7c1f262116a8f1909af52b8c3ab93d0bd5405f8c7c4814322b772a80674fb702fdf2354272d816e24384d89ced99f0817d83382db3e5bcac8305d5510617ffd8db3c3ad97ba20aa24f5487e936e11079914b9d5db8c7ab00e6014daabf31c9808e56bd47a2a201f949aa93659cc6b832127fc105dec0971f9aa677233ad90da7b0a2c4546e793be9b9eebb6b306ee7e2de7227a5b9cce0bc2a2a13006bbe82948534d7fe1fd7f26b3a8dfdd2694a8582e2a18ff55fbe5c8543ae07b747392764d7728e5405a453f28e379cceee5ce71c2eb9ef9fa3280919a795322922d1de1b69421b92683b79606057cfa90676b1c128c81981d2df03adcc9b59346ace999d4f221e1d098404b64f280a9c6e5edd06d58ffe85ff95a4c8d9d86f8c422aaac6314eb949f2d33629e513734f755dc6f38b138e2e24b7d8b05c44c829b39db3e24e1f3e57a85771222fa70bfe6e42b260e4bf5ca9f509701d97b55f8166110f09593f961819deb68f9d493a2835b5701329ac4987429000a445c322c766eb6268d70401558134402bdbf824b62c4da9e30f6ca502322f878cd1e303cd5bc808231322cebc875231a66ab8d94800e14242c656d8dbea45dffffb742ee39543a7313522145c9124ec503d3129fcd3923accdc504376e382f21a72fd640d08d122c46279fd0f58244deaa945bebf54631741b688bbdb1add48eab1ae822438bf70e5ae257ce9015f1a37793ba9948747e8d3011d279950287c9220d2973438356d5d2c1ce920431ef41ce6f456c3593498c10fb9a01e86714fa33af56a1a9a3c6b6eed94b02e85e0b88131523ab358ccb9ba3e23868e086483a5fc920496600ffe3e801ad06342f69a1b12b3418a4a931ce459a8bc02602e10e1f6b7d9a177fcb86e055eeebc5f598254392e600061576ceffc1f31b53b4dd0d331b1492ace1c26851f3a3620b44cc1d6e159dc3aae6c31a97ea0708774225327a7a8539889ca61c0a9739e8b8dec3f199a8ed9bbaa4d75b9b0f637f32d28447706b46454c5e139eb7fa0a4a1f02f7cabf93e68946be0c401469a2fb6cc38d07804cc562a6de707ac769e76dba30d488368af70eb7ebe4263872e1adca76dd45de580e2f0ddbebcc0458f713d3db42afac9bda185912f418c171bac8c485c38aba2191d79a5375002032b5c184a0fd1a00afa9e60814bfd9437071682fd998e752c8a86a581e259f8ec5c3090120d1ac2ddf73e72e54d16c3be7e90cff8f7bf73e3823f83a4f5695e3302f2aee5a65806057a074eff4ef04381938d13742819dea8f15813ae1549baff2a66ea1cbc7ff07a3dbfa77d808d1b346bd43b2a346a598c30eb325bbd659ad904c89a663aa1e060e1d0994df9dd9b6ce30ae11b9e9074eccd5640a71cb65ccdb24bb9276d44106f2b6a80926fc4495814a2e6d187ac4e9f0cfbb45c6413d7240546a708fddf3b20ee04571bb029ddf34f6a6111730d33f78783062f15ff7785ab8aabf193ce119f0f7dc693088b8910990654c02fce9df83dbaaa56b3e3a3f6041b04b09636e1f160d861eccc79068acf0666e592ea935e8d2ec7200221abc9b3e027e207d107a0d62f1dfd7ac56b0613e590c89e9f3ba5753b66a8429a32d0a7aee3eefd0496684a5598c84db67907d3217920254982fb6f84917b6aadedd831b212f42cb94b20d3b4a0d057cf77de85b86f4e90626c928ed41fb76bbf0d2604cf2721c44f7d1cddcb25d57891cf33851728b8772c98a83a8348960667e2fa5baf6a3a9de2c9a34ccdc79813fcb26bff678706f84075d1b84638acc8f4d3738e356733935e9da86b47aa109e1d9287a48cbac95c1586e384768e117d80d35191caf85d409c97c2d1433d53a4dfa07dcd9ea7d4361ac4c6036433a7ccf3fb39b54af6744cdbc7dc50c2169b2ab52a3e15bad74d810e4bbe478b4658f468ff95019aa9742e164332cf789d856275b8d9d4809785b665c68893c6fcdcaa3b0aea87411344e39968e946facc95e9deb15e8d23e74027a8a6bf85b3fac0284fc99463fb7b8901d5448d99d015dd78fed4e4fec4afac72a1d5d5b78936933a50abc41f15da7c59634063c0f1b96cce3f6d8bc6d4c81ee13832ff4c61601b3ec6d4d236340ccf108d2202af8982878649e976776f2382547c9bcafb607bdce1cefbdcc2d9843376f8cab3815fc3b929d4293f57c96fab9dfceade83ad93578628e6a7403ee2f56b4c8668b41dc487ef18fdc65c72e686edc589552911ea5a19f19d62c986b605285689e0209406a36c164c1fdcac1c7e208b7ac4d8052e8aaf01e93f74ccb3d52ccc3f29b29e96f672c25c3f0f72ac2c71621ddac5d5a7b384ea0b545480722b43c804d6065a69f568334ba3f0dc013313818196a3f15180899dd4b56991d47d87099a0797f7a0c7492eda889adae10e739523d1ac60f0180f24b888d516a6b78d7a52abf4d576a1589566bfa9bfde690b9518b59f37aa0c070110052abab3b52387a07d44d529bdd1a7dea7f3bf6422189388819730f4fd3564222b389a53503bafad6f7f9c40c3ac69ad719532182495e38b4987a1172f68370a3dfe8efb23eb1b09b899b9731bf9456c7bce78f76a11f3e4c0fc0ca3caefc2134965b6bd8469b768c622e0ba0e56cc6d9cda408dbe559e3832366930cf984f89da5543dfafdcce33d60c7215cc9841899dcc3f861ffaa3afb3a040a014775623fe09f7cffcc91924ef1e03395c933557c8f2fc54b836089e083a49f236f9536d00eef7505e1eeb5dd268ca8c7c45a3cbfa7040df658bc2b7e192de40952038c3ec23445f0f24b6d7f34a49f6629db7fe9d196cac5d1d4402e672e1b220ec638fee00bcf4c1f2748e6fa06bcd83dab86fad3911fadb6dca3726314fa5520dab4c42a36f3876076d112251ad1e6dec1a4910efd846d5f2118554f8b63f8b14482dbc976fbe7187d6474c4b411dd56ed5b2c102b6addc6c1e1a5629f9c4b1e2ce1792bfcb4807f73406944a8e942a14d9488aa8894901f0f57264369ebd9bcd52a930665e73f4a71051b991fa126aa3c17ee193b4ef6dacb79cb783afc99be58ee8d9dcaf24e15c711c63c164c89f3d751c7060f07ebdc2426e4e01085d535e2098114fb9017d1ecff8ceac30ed6e4d357349bcfb6580e989b025d797453b7e3ee340b734260c21bafc7a7039c4b3678c77d35ecf70c0613291add8f1fd7b5c991c532d8b87e025222a0940dce71a64280780ba11f01843740b3250f1fc4711af7dd93f1d8f71e507d1cf1de216ee70d823e71d847dac1b3b3ecd8351b51d92a4931e27969fc45044bd7a3a6f6798107b07d77c75c8ba16a08be673e54d14e67eeaed7bc67bc1541c9b6f3b53a7a669c1761b4213fd50ab7fb59dc54f7bd99e370471250be984b19e64e20077525a056ad43e628e7309d82269e96aa9298a91adff7d708ee8da88b6702670f6cbb2e141faa752c41946e541421860753fb86140be72371e74e8653b18812ebb06b42fbbcd6261cd67571b46f22f27ed0085add70fc89d8cab424f1d6fbc97fd53ed7d07ccaf803d4410bfc16e9ccb205e4c198b7a81cb1ecc39d99621afa1124e80b0b4621f5f8243cdf8c32a54534303d07dd138f6781a600ef3915673fcdd6e31faeda9ee1a1e730b44ace974ad6e77372744c4473b6c93a262e32e890779c452d59131bc8ac3f3bd18533b206bec9043fba05918946137cb3ea5003c52417917cd461c13ff6691d99b9b32dcbed0a5a541b604198a8a89f4cdcc92173ae3bd67e3e747f4596bd1db9636f35da83ff276a223276bae21000ae02f7ea52a788e8860546f02242e6b44e8930c9a2045b8ae7108d4ba729adc007ae"}]}, @generic="b670b802065edd79f4f2fec56c406c8ec33c0d5c20e777d0084293a47a4472cc8937d7cfa57f9ebd4e36c6199397c55d1a95eb51ea091cc35300193cf8bb1260beb7249dc8e8c47d422b80e659cb148d5a1c8610f528df181d69530a14115e12ae5e1ddab4988a3c72e0b4208ec70de3e5112301aa4c6311769ae7221eec39f181316bc3cf4d4f481078b04f510ebf1e46f3802b418df326c7bfd5306f", @nested={0x56, 0x78, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x60, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="37fac1570b1623a3e880e5d5aa63250195786714d3140c70095db98fb82378d8e3392b8af85f365ac05dbf9d38dea3a425de", @typed={0x8, 0x34, 0x0, 0x0, @u32=0xea36}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@local}]}, @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@private0}, @typed={0xd7, 0x30, 0x0, 0x0, @binary="fc981e8c44415d48925a126d40764bd8a32b0ec44f69a8d3d6b5cc3422b57f2864d14b3507077c39a63afc280d141108eb9074c145c77cba8ba8ae3ed765f2168bdc77f7bf488e91c7938392614ee378edf09ea0886198746dd914df65f370d9c8267611f92ee33d47f1d503e10854d5066eaecf60c9a516eade15bc3892c6d192b920dbdbff446139ee528e67426ba77a8662d7d41b99b2bd5947b611ea35ffeb9cc46eadf7742235a5f1928488abae19fbc04724a9ad2e3829004e543a6870a34d0e3600967fab8920fd2b84936aae9be991"}]}, 0x1214}], 0x3, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10, 0x10}, 0x100) r11 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2201.510509][ T4026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2201.527524][ T4033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2201.759396][T21360] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2202.039385][T21360] usb 5-1: device descriptor read/64, error 18 00:49:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024f, 0x2000000020d, 0x0, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x27c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x66fe}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_CT={0x84, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}]}}, @CTA_STATUS={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x10001]}, @CTA_MARK={0x8}, @CTA_ID={0x8}]}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CT={0x48, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x20, 0x17, [0x81f, 0x1, 0x4, 0xfb, 0x9, 0x1, 0x1]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}, @CTA_ZONE={0x6}]}, @NFQA_EXP={0x160, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4008064}, 0x4) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:26 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x9) 00:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:49:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0xac, 0x21, 0x300, 0x70bd27, 0x25dfdbfb, "", [@generic="c0c79ef8cc87abe4551956766a4291a63dc8855ba71f5f343ffc079d0e28b71d97c8a08f72bd7b1e552921b728b8f7aaf2dc87b0a7bf890c397c0deab523df2fb46beeadcd5b85e9eeeba1154c183d3c5c7b19f3a701ca3f09d4f1fcf3ec606f635c07a5efdcf58a5c17dc66f5b2b5f4ae6111e0df4021e497544ea817af8fa5e53ec6516390e8f8b437f2d24cb8299f8abb67a684f4fc1df987"]}, 0xac}, {&(0x7f00000002c0)={0x34c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1e3, 0x16, 0x0, 0x1, [@generic="047ef3eec3c21e09afdc84848654dadf8f72df52a4ea74cde694daa86e284b14255ca5c8474864a170c94af9ac2459be631553e6bc7cab83d035acfcceee6c6f9736ec8f529ecff4c55fbe55d22f75141b2a310d35db8557e353e6379612eb8034ecf00de26c56d06d5fd0807eb8f13494f7f34a3a80a508f013ab42639595873685bbc850454e20e6b009b477c39b7da5f4f98ad743f2dcea643cae959723f5e9", @generic="f537534954b4c4945d2b98551b1e5a734e8546cc03fc3d964973ad8455cfeac4966aa6787cc1687f67de5cdd1c21fa69d4181b2099f544cde6e0147dc08dc3e84e0d", @generic="d02043bb0269568dc1cf3ac0f21f27041bd9e271ce194b8257d53f452b2f6411d2cbc7ac6880b1f8d70d444c170fa062a6a5e82c3a5048eec0be733a019a8a7392be2c9f580095204dbd2508a67d442c883967399d208ebcc4ce99672095c37c7bf1491496c690ed", @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@remote}, @generic="c759ea6cfd77234a7188708b11b8630054066816768d78ca2b34cac512476e3e65ae02e43f1b35d01bf75113e581581f7b8fee3d1ba792955ecdce3a06bf379b36535d9e99fb4a987baa9d34321da1b9510b96c7c606d0d21abd7fe2c00d13c94c50d635ee8b8c097713575e62a835ff9f30851774d401ab576a09f4a8f5595e"]}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}, @typed={0x4, 0x43}, @generic="f7a24ae43c741dce86876d6fc91c09dd68fbbbdd1222663dc7f9f3dc1d18e59c844306fe92fe77746f0252a5ca58d73e567e9461bbbe4f365f66ff4e138e043fa95cd228f95dca27a7e681f8256f2ba6a362f2ceea4ea77b28ce4994a8fbba7bbdc32243ac41038617c03107a73ca065bce65a4d59f01be2522eed065c1351ba01757fba9d63f03bb530c12ffa13e3f17e13d08836087c14c6b9efe03b0d4f90a426e7", @typed={0x8, 0x94, 0x0, 0x0, @pid}, @generic="5f54cfddd666481a0a3037f8e0bef389872995f55630f6f08abd91f16d42809c7f72de7f9d7aa68f41e3dbbcb791e22aa04521e729b54213fa365bd46dc8c7624a8eea9eee94f146b7c0400ac4c894a429d181f113e2e1e454a28b119d9a83a7cf2e305e185fecad78952bb49463681db48510f69a5d7bad7646d1125ed348c2c9b85df5bd4393ebd190a4a7d90d593fd9d40ce45fb6a24a74", @typed={0x8, 0x41, 0x0, 0x0, @str='#-]\x00'}]}, 0x34c}, {&(0x7f0000000680)={0x1214, 0x31, 0x2, 0x70bd27, 0x25dfdbfc, "", [@typed={0xd, 0x75, 0x0, 0x0, @str='/dev/ion\x00'}, @nested={0x1010, 0x92, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @uid=r7}, @typed={0x1004, 0x51, 0x0, 0x0, @binary="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"}]}, @generic="b670b802065edd79f4f2fec56c406c8ec33c0d5c20e777d0084293a47a4472cc8937d7cfa57f9ebd4e36c6199397c55d1a95eb51ea091cc35300193cf8bb1260beb7249dc8e8c47d422b80e659cb148d5a1c8610f528df181d69530a14115e12ae5e1ddab4988a3c72e0b4208ec70de3e5112301aa4c6311769ae7221eec39f181316bc3cf4d4f481078b04f510ebf1e46f3802b418df326c7bfd5306f", @nested={0x56, 0x78, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x60, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="37fac1570b1623a3e880e5d5aa63250195786714d3140c70095db98fb82378d8e3392b8af85f365ac05dbf9d38dea3a425de", @typed={0x8, 0x34, 0x0, 0x0, @u32=0xea36}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@local}]}, @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@private0}, @typed={0xd7, 0x30, 0x0, 0x0, @binary="fc981e8c44415d48925a126d40764bd8a32b0ec44f69a8d3d6b5cc3422b57f2864d14b3507077c39a63afc280d141108eb9074c145c77cba8ba8ae3ed765f2168bdc77f7bf488e91c7938392614ee378edf09ea0886198746dd914df65f370d9c8267611f92ee33d47f1d503e10854d5066eaecf60c9a516eade15bc3892c6d192b920dbdbff446139ee528e67426ba77a8662d7d41b99b2bd5947b611ea35ffeb9cc46eadf7742235a5f1928488abae19fbc04724a9ad2e3829004e543a6870a34d0e3600967fab8920fd2b84936aae9be991"}]}, 0x1214}], 0x3, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10, 0x10}, 0x100) r11 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) ftruncate(0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r8, 0xfaaad000) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x1) 00:49:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2202.429383][T21360] usb 5-1: device descriptor read/64, error 18 [ 2202.699390][T21360] usb 5-1: new high-speed USB device number 56 using dummy_hcd 00:49:27 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) io_uring_setup(0x16b5, &(0x7f0000000000)={0x0, 0xe96c, 0x20, 0x0, 0x262, 0x0, r1}) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 2202.969369][T21360] usb 5-1: device descriptor read/64, error 18 [ 2203.359387][T21360] usb 5-1: device descriptor read/64, error 18 [ 2203.479414][T21360] usb usb5-port1: attempt power cycle [ 2204.189367][T21360] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2204.359452][T21360] usb 5-1: device descriptor read/8, error -61 00:49:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:28 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa) 00:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:28 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x785442, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1408e9efbe5f3970e5f313a9cec0506f75e4d666b172303f560729ab99", @ANYRES16=r1, @ANYBLOB="040000000000000000000b00000008000b0003000000060028000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc76051c5e9fdcfc6}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x55002101}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c71be8b46000000", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f41b7e4af7cfe1311cb3f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd51ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889789845024c7e9a4f6614785e78d2a0824c233acb6"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xad}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x93d4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x5, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='syzkaller0\x00', 0x5, 0x5, 0x1}) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(0xffffffffffffffff, r5) 00:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2204.526644][ T4069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2204.562336][ T4080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2204.569818][T21360] usb 5-1: device descriptor read/8, error -71 00:49:28 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xb) 00:49:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 00:49:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2205.069380][T21360] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2205.239419][T21360] usb 5-1: device descriptor read/8, error -61 [ 2205.509430][T21360] usb 5-1: device descriptor read/8, error -61 [ 2205.629501][T21360] usb usb5-port1: unable to enumerate USB device 00:49:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:31 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:31 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xc) 00:49:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r2) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:31 executing program 5: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x6}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x7, 0x59b, 0x7, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000300)=0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="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", 0x74, 0x8000}, {&(0x7f0000000200)="23f1248422aefdbc75ce1bd891739255f8b6c0fee8e6fbf88d722b618f847a02d20e2b23939768960c552fac29ed8d921328059f9110da77f3179faeb030ffa73fbdda4ff289768130787a6a7cf339335b253324163b0b2cb6d1417efe4dcb7b071be9326112cfd72effe7734fccfdb00296a96498bd9358427a0337b43be95ae0249013a807088d2cc178c66cee8ad17ede6359fd131ec3312dc53b106fc6c0c79da10bb3cdafe13615124ae5a813d80cd32b28ce81e8417f43a7b60529a7c8", 0xc0, 0xbd}], 0xa2000, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c618bffff0100666f776e65723e", @ANYRESDEC=r5, @ANYBLOB=',func=KEXEC_KERNEL_CHECK,fowner=', @ANYRES64=r0, @ANYBLOB="2c666772ce03723d", @ANYRESDEC=r9, @ANYBLOB=',pcr=00000000000000000035,subj_user=threaded\x00,\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000000)={0x3, 0xcc, 0x9, 0x0, 0x1, 0x10000000}) 00:49:31 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) fcntl$addseals(r7, 0x409, 0xe) 00:49:31 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xd) 00:49:31 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2207.537974][ T4103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2207.553542][ T4113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:31 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xe) [ 2207.620946][ T4127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2207.654214][ T4130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2207.989402][T21360] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2208.259395][T21360] usb 5-1: device descriptor read/64, error 18 [ 2208.649408][T21360] usb 5-1: device descriptor read/64, error 18 [ 2208.919374][T21360] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2209.189383][T21360] usb 5-1: device descriptor read/64, error 18 [ 2209.579402][T21360] usb 5-1: device descriptor read/64, error 18 [ 2209.699459][T21360] usb usb5-port1: attempt power cycle [ 2210.409411][T21360] usb 5-1: new high-speed USB device number 61 using dummy_hcd 00:49:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:34 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x785442, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1408e9efbe5f3970e5f313a9cec0506f75e4d666b172303f560729ab99", @ANYRES16=r1, @ANYBLOB="040000000000000000000b00000008000b0003000000060028000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc76051c5e9fdcfc6}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x55002101}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c71be8b46000000", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f41b7e4af7cfe1311cb3f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd51ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889789845024c7e9a4f6614785e78d2a0824c233acb6"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xad}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x93d4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:34 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xf) 00:49:34 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:34 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$CHAR_RAW_FRASET(r10, 0x1264, &(0x7f0000000000)=0x3) ftruncate(r7, 0x5) 00:49:34 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:34 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x10) 00:49:34 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f00000000c0)=0x2) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2210.579522][T21360] usb 5-1: device descriptor read/8, error -71 00:49:34 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) r6 = dup2(r4, r5) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x6, 0x1}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x0) [ 2210.627108][ T4158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2210.659577][ T4166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2210.799419][T21360] usb 5-1: device descriptor read/8, error -71 00:49:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) [ 2211.289400][T21360] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2211.459488][T21360] usb 5-1: device descriptor read/8, error -61 [ 2211.729458][T21360] usb 5-1: device descriptor read/8, error -61 [ 2211.859468][T21360] usb usb5-port1: unable to enumerate USB device 00:49:37 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:37 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x11) 00:49:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) poll(&(0x7f0000000000)=[{r10, 0x4401}, {r11, 0x420}, {r7, 0x9100}], 0x3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x3d) ftruncate(0xffffffffffffffff, 0x0) 00:49:37 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="94632ec9ca020000", @ANYRES16=0x0, @ANYBLOB="000225bd7000f7dbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=r10, @ANYBLOB="7401028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="84000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000400fb0105000000090003ff600d000004008c00000000000001072106000000e36101020000000000043ff93f0000000004400601000080030007010000000000000301050000000800800101010000"], 0x294}, 0x1, 0x0, 0x0, 0x44000}, 0x4008051) r11 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:37 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:37 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x12) 00:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x0, 0x0, 0xffffffffffffffff, 0x11a000}) 00:49:37 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2213.591408][ T4181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2213.598662][ T4181] IPv6: NLM_F_CREATE should be set when creating new route 00:49:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) [ 2213.644156][ T4195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2213.669163][ T4204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2213.855723][ T4207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2214.019402][T21360] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2214.289398][T21360] usb 5-1: device descriptor read/64, error 18 [ 2214.679414][T21360] usb 5-1: device descriptor read/64, error 18 [ 2214.949405][T21360] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2215.219436][T21360] usb 5-1: device descriptor read/64, error 18 [ 2215.609415][T21360] usb 5-1: device descriptor read/64, error 18 [ 2215.729517][T21360] usb usb5-port1: attempt power cycle [ 2216.439433][T21360] usb 5-1: new high-speed USB device number 65 using dummy_hcd 00:49:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:40 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x25) 00:49:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) 00:49:40 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x8, 0x8, 0x1}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) write$P9_RREAD(r4, &(0x7f0000000140)={0x49, 0x75, 0x2, {0x3e, "c1d6485bb3ae45a7bf19f761dbf427fb11a0eb5328d3124496aa99a44384f9fa914c4a714b3eb419e80dca218a97b06e613cf4f4a25ec805fe57d4db0daa"}}, 0x49) ftruncate(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000200)=""/157, 0x9d, 0x8000) 00:49:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='$\x00', r0}, 0x10) creat(&(0x7f00000001c0)='./bus\x00', 0x16b) 00:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:40 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x48) 00:49:40 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x12000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCMSET(r8, 0x5418, &(0x7f00000000c0)=0x3) r9 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000000)={0x404, 0x14, 0x1}) ftruncate(0xffffffffffffffff, 0x0) [ 2216.589413][T21360] usb 5-1: device descriptor read/8, error -71 00:49:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:40 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2216.652963][ T4232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2216.668986][ T4236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2216.809449][T21360] usb 5-1: device descriptor read/8, error -71 [ 2217.299388][T21360] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2217.469470][T21360] usb 5-1: device descriptor read/8, error -61 [ 2217.739473][T21360] usb 5-1: device descriptor read/8, error -61 [ 2217.859480][T21360] usb usb5-port1: unable to enumerate USB device 00:49:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:43 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4c) 00:49:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='*}\'@\x00', 0x0, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x9, @rand_addr=0x64010102}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) chmod(&(0x7f0000000180)='./file0\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0xfeec) r11 = dup2(r10, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000200)={{0x0, 0x0, 0x6, 0x3, 0x5}}) 00:49:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x104) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) 00:49:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) 00:49:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:43 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x60) [ 2219.617588][ T4249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.643952][ T4259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.694686][ T4269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.717227][ T4273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2220.059426][T21360] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2220.299420][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2220.419478][T21360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.429569][T21360] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2220.438493][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2220.448597][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.457536][T21360] usb 5-1: config 0 descriptor?? 00:49:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:46 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0xb3d7, 0x8001, [0x7, 0xfff, 0x1, 0x200, 0x8000], 0x100}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:46 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:46 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x68) 00:49:46 executing program 5: r0 = creat(&(0x7f0000000000)='\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:46 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x20024b, 0x0, 0x1, 0xffffffffffffffff}) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:46 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0x1fd) [ 2222.607878][ T5] usb 5-1: USB disconnect, device number 67 [ 2222.640040][ T4288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:46 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) r9 = dup2(r0, r8) r10 = dup2(r3, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:46 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6c) [ 2222.671441][ T4301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2222.719795][ T4314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2222.741098][ T4316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2223.039447][ T5] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2223.289434][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2223.409485][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.419600][ T5] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2223.428538][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2223.437597][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.446257][ T5] usb 5-1: config 0 descriptor?? 00:49:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:49 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x240100, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKBSZGET(r9, 0x80081270, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x0) 00:49:49 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x74) 00:49:49 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x94, 0x3, 0x8, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x3b, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4c8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40001) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x14e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x290a00, 0x120) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000740)={r7, 0x0, r2, 0x2, 0x80000}) r8 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_netfilter(r11, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x14, 0x6, 0x3, 0x801, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000811) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0xb, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 00:49:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x6, {{0xa, 0x4e20, 0xfffffffa, @remote, 0xf02c}}, {{0xa, 0x4e24, 0x20, @mcast2, 0x3}}}, 0x108) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:49 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2225.629767][ T5] usb 5-1: USB disconnect, device number 68 00:49:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 00:49:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:50 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2225.679049][ T4332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2225.718262][ T4346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2226.089408][ T5] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2226.329453][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2226.449485][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.459658][ T5] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2226.468630][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2226.478618][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.488926][ T5] usb 5-1: config 0 descriptor?? 00:49:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:52 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7a) 00:49:52 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x5116, 0x737, 0x4b37, 0x100, 0x4, 0x7fffffff, 0x3, 0x8}, &(0x7f00000000c0)={0x1c00, 0x100, 0x10001, 0x8, 0x4, 0x1, 0x5, 0x2}, &(0x7f0000000140)={0xfffffffffffffffa, 0x7f, 0x6, 0xffffffff, 0x18, 0x4, 0x74, 0x8}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:52 executing program 5: r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="809e6e83770af66098c98f51cb22d1f858a74cad1b685b8a726408da8c9b8101233d9f1a251bb0490dee4527e3d64b184f20a6fb33a19e69cb88e37f3d63bb422878050854905d86a3e74899a72a5581814c1fe1926fc8276e1206c6b560d80c4aceb7730ee51518c79caa1c9528893ce813c930117384", 0x77}, {&(0x7f0000000580)="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", 0x72}, {&(0x7f0000000100)="085492c4464f7bb97997b50670db76c92ce5a82da812cc36d2b4a6c7287ceb52411962f40cf3df5e0c92e25b00fbef0326711626c761fe065b1c30e420d72b05071713f5522baf7a4221f5169d92bc3d0826b35748d06f3d3bd7bff9cfb73f647a4eb629ed28e28e96c4f2a58dc4abc4ef8717779db82c1a0cb1", 0x7a}, {&(0x7f0000000200)="86f53d3e64524d126a896ce222420247e4a5bd55b132bdd8849212a4448f890394409d50c66807361e2d54dc6e885a228c0b34d3c9c8d2225fe6100e75f0fb1ef1f2f4b2e5a6115197e628cb3b000000000000000000", 0x56}, {&(0x7f0000000180)="32ecb9bcd53f0800", 0xffffffffffffff99}, {&(0x7f0000000480)="1c2990b1d66472fd1e2b80e1dee8cd2867e7f0ec17c45a747df8f6016b7e0b94167161f9bc6e41380aa39ed9193b59acea4bd2920b237decd0801b4f078f300b4b6f94c68d25df9dda9daeb18b4314b82ae3dcc0c14cd739d25e7a1cefe5c70d37cf43f4c954a93a8e92d21046987c8257ff982733d0883beaf616ac4a9e14b22378dc9ebcf178ac84db1cbdbf9de017ae0d1e432660534471af95a41c97d3c4920514b78d71b9e568f208f6617c036c732d1ad27ad16869e61e2fbe0c75572ef17923fbde2c280f3f013121c3d3b363a019601be384985f0f318ca0afa1fb4f1bcaebb47947d9907d33000000", 0xfffffffffffffea3}], 0x6, 0x3, 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fallocate(r2, 0x8, 0x1, 0x26) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2228.673095][T21360] usb 5-1: USB disconnect, device number 69 00:49:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000200)={0xef, {{0x2, 0x4e21, @broadcast}}}, 0x88) ftruncate(0xffffffffffffffff, 0x0) 00:49:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:53 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfc) 00:49:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x8c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r8 = dup2(r1, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r10 = dup2(r0, r9) r11 = dup2(r9, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2228.718020][ T4374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2228.745200][ T4383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2228.815048][ T4394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2228.853500][ T4397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2229.079437][T21360] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2229.319452][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2229.439482][T21360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.449596][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2229.460310][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2229.473297][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2229.482340][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.490937][T21360] usb 5-1: config 0 descriptor?? [ 2229.530013][T21360] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:49:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:55 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x12f) 00:49:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x24002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x10) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r7 = openat$cgroup_subtree(r6, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r8 = dup2(r2, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x10, 0x1, 0xffffffffffffffff}) r10 = dup2(r0, r9) r11 = dup2(r9, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:55 executing program 5: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup(r3) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0x9) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:49:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:56 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1a3) 00:49:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2231.686601][ T5] usb 5-1: USB disconnect, device number 70 00:49:56 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1a5) 00:49:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:56 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x300) 00:49:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2231.817284][ T4439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2231.838277][ T4443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2232.099518][ T5] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2232.349469][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2232.479480][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.489631][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2232.500356][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2232.513336][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2232.522384][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.530997][ T5] usb 5-1: config 0 descriptor?? [ 2232.570081][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:49:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:49:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x500) 00:49:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x10000, 0x24, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022f}) ftruncate(0xffffffffffffffff, 0x0) 00:49:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) pipe2(&(0x7f0000000000), 0x80000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000) 00:49:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x8}, 0x16, 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x84000) 00:49:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:49:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2234.703369][ T5] usb 5-1: USB disconnect, device number 71 [ 2234.734988][ T4460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="94020000", @ANYRES16=r9, @ANYBLOB="5b0800000000000000000e00000280000e"], 0x294}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000884) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:49:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2234.776956][ T4473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:49:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2234.836001][ T4480] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2234.892524][ T4480] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2235.119455][ T5] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2235.359435][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2235.479502][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2235.489593][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2235.500293][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2235.513260][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2235.522294][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.530892][ T5] usb 5-1: config 0 descriptor?? [ 2235.569975][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:02 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x600) 00:50:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = dup2(r0, r5) r7 = dup2(r4, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f0000000080)={0x6, 0xff, 0x59, &(0x7f0000000000)="b304b537dd5120a8059d2ff46e0162cf2a7328fda6eded598aa3d7a13b0a834a0ad181093e675c9536dcb548097b52df1b13223849bdc9b317692e7d466ba634f1a84558899cb61788b313ff5b657c9859e670e8611ae1eedb"}) creat(&(0x7f00000001c0)='./bus\x00', 0x51) 00:50:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 2237.717165][ T5] usb 5-1: USB disconnect, device number 72 [ 2237.752456][ T4505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xffff, 0xffffffffffffffff, &(0x7f0000000140)="da66b5c73c678bb1f70992c8c043e40d83c377cc6c9f0f6a728535038306852bc6038be471d7b9e1955e3d817f3a65e63081c87ccdd17af41ad63435cae7d4b19ce5a19ee77413bf31ee4e0fe062092fe20ebe2163b2ae8cd87e6379697b032d542711612d39af96ad74dcc09e5b5bef5633678a5bb37bf9c4af685f75bb28975aba4b21abb230216f10c2be0cc3d0d7cb0672d6b1c63e38b332aca242c93bdf25b82b4fb89b665ba106b6a17158c18de85dff69880c69c433e94e2b7f2561ee9a6d6171a5149b55b889556984358cec2d4bb1514b7fbb22dfb3d81cde76", 0xde, 0x9, 0x0, 0x2, r12}, &(0x7f0000000280)) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) r13 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000000)={0x16000000000800, 0x1a}) ftruncate(0xffffffffffffffff, 0x0) 00:50:02 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x700) 00:50:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "a927a4b7f6640eb8", "0357880e7c1e1342b825a7bae8e68cacb246443e67792086e5972242bc9cacd3", "a7f5d9e4", "6eda449c7e8ac60d"}, 0x38) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 2237.771449][ T4514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2237.802995][ T4521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2237.814004][ T4523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2238.129475][ T5] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2238.369432][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2238.489506][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2238.499643][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2238.510363][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2238.523435][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2238.532478][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.541078][ T5] usb 5-1: config 0 descriptor?? [ 2238.580015][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:05 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x900) 00:50:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) 00:50:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x1493c2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6e0, 0x4) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) creat(&(0x7f00000001c0)='./bus\x00', 0x0) io_setup(0x1000, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x11f, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000200)) 00:50:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000000c0)={@local}, &(0x7f0000000140)=0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r9 = dup2(r4, r8) r10 = dup2(r8, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2240.748927][ T5] usb 5-1: USB disconnect, device number 73 [ 2240.784243][ T4541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:05 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa00) [ 2240.824301][ T4553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) [ 2240.874762][ T4561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2240.904661][ T4564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2241.169448][ T5] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2241.409477][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2241.529533][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.539652][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2241.551000][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2241.564410][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2241.573740][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.582623][ T5] usb 5-1: config 0 descriptor?? [ 2241.619956][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:50:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:08 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:08 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xb00) 00:50:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x4c, 0x49, 0x300, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, r5, 0xb361}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x39}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 00:50:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x40) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) ptrace$setsig(0x4203, r7, 0x9, &(0x7f0000000140)={0x40, 0x7f, 0x5f6458be}) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x15c, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd204}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2a79}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x803}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8050}, 0x85) 00:50:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:50:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2243.768698][T21360] usb 5-1: USB disconnect, device number 74 [ 2243.805066][ T4584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:08 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0x1fd) 00:50:08 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xc00) 00:50:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2243.836344][ T4590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x701000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) dup2(r4, r5) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x401, 0x2000000022b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) ftruncate(0xffffffffffffffff, 0x0) 00:50:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2243.894812][ T4601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2243.930474][ T4609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2244.189493][T21360] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2244.439466][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2244.559579][T21360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.569687][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2244.581112][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2244.594625][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2244.603993][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.613044][T21360] usb 5-1: config 0 descriptor?? [ 2244.650053][T21360] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:11 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xd00) 00:50:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:11 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) 00:50:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x28082, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x141282, 0x80) prctl$PR_SET_FP_MODE(0x2d, 0x6) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x800002, 0x80011, r1, 0xc004e000) io_uring_enter(r1, 0x76ea, 0x3164, 0x1, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r2, 0x0, 0x9, &(0x7f0000000200)='/dev/ion\x00'}, 0x30) r5 = dup2(r0, r3) r6 = dup2(r3, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x84) 00:50:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2246.792455][T21360] usb 5-1: USB disconnect, device number 75 [ 2246.823971][ T4627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:11 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xe00) 00:50:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r8, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2841) r10 = dup2(r0, r5) r11 = dup2(r4, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2246.842081][ T4635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2246.894365][ T4640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2246.914593][ T4646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2246.955613][ T4649] tipc: Enabling of bearer rejected, failed to enable media [ 2247.080014][ T4641] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2247.094201][ T4641] tipc: Invalid UDP bearer configuration [ 2247.094224][ T4641] tipc: Enabling of bearer rejected, failed to enable media [ 2247.199464][T21360] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2247.439479][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2247.559536][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2247.570244][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2247.583908][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2247.593605][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.602584][T21360] usb 5-1: config 0 descriptor?? [ 2247.641378][T21360] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:14 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xf00) 00:50:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:14 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fchdir(r1) 00:50:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x6, 0x2000000023f, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2249.816457][ T5] usb 5-1: USB disconnect, device number 76 [ 2249.848621][ T4665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x9, 0x12) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x82}, {r6, 0x2000}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={[0x649]}, 0x8) r7 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) set_tid_address(&(0x7f00000000c0)) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000000)={0xbf, 0x4}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="06000000", @ANYRES16=r9, @ANYBLOB="000226bd7000ffdbdf250400000014000980080002000400000008000100040000001c000380080001000900000008000200170d000008000200820400007000068008000100ff010000080001000600000008000100fcffffff54000300d4e6721719ef33e6363dd5e10b90ac7470104dbe76ec46390e7f35c74726d4fd7cc0361db29e94ddb9dfd6f048af8b5436ddf991eee07f401090021210e67ec8c2f54ea6d9c67673a9ae7188ab274fcd400004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40845) 00:50:14 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1100) 00:50:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2249.886056][ T4677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2249.927053][ T4683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2249.947721][ T4690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2250.229491][ T5] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2250.469490][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2250.589604][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2250.600369][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2250.613951][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2250.623310][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.632212][ T5] usb 5-1: config 0 descriptor?? [ 2250.670011][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x1, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:17 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1200) 00:50:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x17) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x8050) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x32, 0x6, 0x0, {0x4, 0x5, 0x9, 0x0, 'threaded\x00'}}, 0x32) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r5, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r6 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r5, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r6 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2252.835389][T21360] usb 5-1: USB disconnect, device number 77 [ 2252.866271][ T4705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:50:17 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2000) 00:50:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r5, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x401, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r6 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 2252.921352][ T4720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2252.928784][ T4718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:17 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2500) [ 2252.981014][ T4725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2252.998926][ T4729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.063913][ T4733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.074273][ T4734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.100937][ T4707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.239472][T21360] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2253.479485][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2253.599575][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2253.610433][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 2253.624112][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2253.633916][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.643125][T21360] usb 5-1: config 0 descriptor?? [ 2253.679994][T21360] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc01090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r6, 0x201, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = dup2(r0, r4) r8 = dup2(r4, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002480)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000002580)=0xe8) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1518c2, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r7, 0xffffffffffffffff, r8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="159ad521c0ea5f1f26cfac889a0a9f348b155b0f4d20835866b6df7e21f24641b64dedc8a00250f02d497b730d612a2e776187fed0c68228ec164f663ff884e2ba395a9bc7900502ba47ec7a7752e29dd833a379c524c0c0e9ae000c2abf2609b53406b0ffd4110e0b2db34651673eb35395f74a9c4436b6ed717fa4ffb741dfda5d5d252717127afd010b8e5b974fcf70c0f0", 0x93}, {&(0x7f00000002c0)="86bb30f85a622787a74e3a3afba32ee2d1e7fdec4495a12ac563fe196f73647a9b3ceb6954862295d4c7e3ddf49495a02ae2ad7c8e360d9add7091cee3c97761c1b4437f3b64a34ebd41a249c65a085b511c908d621e865d4caf822f8e5f744c5371e1a827c7213b4e845098b6b19944a17e042be1d67bb9d064406166a9cc0e04bf93befe3af8f48d7deba71063aaa2d4cd9fbe70df5bd64b1e7d5100c03b4d5df83bb052d7d2dea5f9f9858408e4ffc5420ff336d829", 0xb7}, {&(0x7f0000000380)="05ef743a2e063a64bfde972ab2370eed76475b1fb1ed228d25e60c678631b84b603f45bbad1d579a2ec4d5b3668504baf6b698c905900aaa3d7e21cb3bdfe0f367197af9107bdf8ec22c21857d8f70cf32168dee4f1691beecba16c7f8411652f42e4461711807ba54c2ff1362eb23422abe426de95fd1c3a3a794f5e1f994d7fd21a87ac1745076a40a4da7047a58784b9f3e58c20288a3f21b61e10848a0ecda4cf70d15e1e661988629b17358f3", 0xaf}, {&(0x7f0000000440)="f3280fe7f365285fb5d28ddd8f8d831c960ea4b897549656bfba7296741f39a1b1b1059a96cfdfcb264fd8a398d0aabfd35b8c8a74e022c9f9bbf0d2f67cb261ed69f792e6a0a78bb62b3b0500833e2570b058ed3d270e5e2f3d59e8bf2349db1134258e2560346c673134516b9a02d156a83f344688", 0x76}], 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000000000000010000000100000088a027e4c360e6b0bc63522f5748cc6097a7ad899d75b60e1a140cb31148dca8645055bfc3d5cc781f6913faf79f208747723eaeb818c05268e65c3e0b9f1de0ab7ad5935bb94a4b9904de284f7bb6488b909a42cdf6f2b30e1d8ab8ac6288a69e696afde31e63148de75a28f98dce95f838cb7d09f069f70bce82f11a7f0f5d348d815d6c80e8d7b97282d606882a946c2f12cd8edad0c4f6febafdb7d313566b9d5c087e31bb4cb39b1f1d0fa804fecd03c3a453a506f70ccbb59999e26508f1662f604ef81f7d18cffb0c9937a11f2ce64d6c00f824dacb4620ee4b6aaf8331b28450", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x8004}, {&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000800)="1ddf03f7a609daca8060ce7bce4eeea907bdea98c1db04cd3133cb58566fe907506bd9a6ad51d23d6879d32aaca3dd30887e5d45d723e11a70237261e16c6610", 0x40}, {&(0x7f0000000840)="c41a553bdb1deddd88a44858a9ff56b3cbc703001c9efc5864ab944a8d2ff134523cafe492dfb94186d5700df7396a1647314ec4349705e6935ec1a97d3404722d598260244d3e86dd5ddcc313931fccd36431aa239fe869154fbcaafa396a0cbf7afc8820ba3088ca4788a04d52787740098437e679beb743972689a3cedc6fa80219da4973bac092c8eff63008cb2135a470c858528810b6c4e4786d3ccb6e4fe0bf0f1dae1999bf2c839a24bf4c777e22d2e79c0b749812c2bc55ba741647a992c401b587ac6d27ec5a2d88665164d408920e70c3719de1d5cf47cad34b578c29", 0xe2}, {&(0x7f0000000940)="3ce90f52ab7d2ec747b2335f26a7042122b653eaadda4ed59cc408d1d089142912e5517fc21b60af472f51dc25256f205b40d641ac28", 0x36}, {&(0x7f0000000980)="0a56a6e027429a544ebf6b844bba496ca02c0489b5c99994207af2daba5afbb0ce677aeef41c4fa8991c10ad945135f16d65cfd6d4393900c684610d0272f997ac942c6c2d88e571d2557c4e5c3093c9c012bd7893d3462e3e0fde8dfbcfdd9afba47782e6dc6a7d8289f40ffa3ebcc6edf49b3dc62f40b025eff71b81ae124c95e1198df422425d3ab19bbfe5f9c5734853438a50021887fd7d7dfce789a4427b714ab0cc6570e022909168dabfbbd7fa2b72b9a7903ee7540f27d672f50c75b22cb9ab8a48f21d4d5a5ffdf78d0316b28d2a564191a101299974e5f229", 0xde}, {&(0x7f0000000a80)="b1ea0fe05228d689265decb22161e9bfa43fbf40e9d3e8228b8837035b7e8f4b26f7e600eff08029bca48f9bd28894c8a31782e4f574cd1fa616db6e520ab54647d9565cf23113674b2796b8eae27a0d143f9ecf0e8d721bfafd7d14a590efd432802412af5727de4e29aa66ab714f4b775c306c4926e2ca36011099", 0x7c}], 0x5, 0x0, 0x0, 0x880}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c00)="e7b5b87873c1381a4e1e9eeb7c7f36024dd3de944132", 0x16}, {&(0x7f0000000c40)="4a3718c12ac64f00576ae032308008ce3f1270bd490fc8c5069c34dc1cb9bb7acee8b2de2f976627b8f27e8e9847a32d8c94f004f9a8e7d816cca2fed797e8d12973e29b7b2e", 0x46}, {&(0x7f0000000cc0)="7565c9ce85026eea665e40ba9be8c6f87f17e8dacafbd4bcf67d5d9d6f9be81a426c957730683604c1f67080564a78e2658cc2cff4202e8af470b2621d0b9274d765a5d3", 0x44}, {&(0x7f0000000d40)}], 0x4, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000}, {&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001080)="2b960b557f2ec3f2db16b51a81e3d1358455bba5292f10439e2aa4c4b0efedde7dbfd2247c4452e3271a1f58df6891ff669fa0472ccc8b223e9bb875b5160203dab033a00e69ab3e973a615538ce5d36d60b65a6", 0x54}, {&(0x7f0000001100)="95ffe5c438b4772f9b7d9f30275ad03719a0127e423f42510306a69ba614c4ed1a44e4141dc753059fcf0e390228c8901ce55cc9a1d33483dd3513b7ea2f1c56120e628fe43a8a3c63877346c1d787ab1a51b92af97674a78a2f2866933da6da1d2b6852ba067557bcdbe36b1bd81b9f4421b4d55b568b0a09eefc63110d079ad4352acfe5d68d99ffd2a6bbbb89fb1e8a4e72b84e5d6d9eb2e74822037705badf15340e01983b6c4e6ddee6b43d755838a1777c7c38443b07af2f393f86a30e08b8ac92c217d3febe17b72f16534e3bf5a2", 0xd2}, {&(0x7f0000001200)="f573a9a72ec762da8dfa382d17cec5142fdc9d719aed7f144fc176c3ffb5f99f0a2fff35ecb6189e15b8e8ed5b9c4e23ad078db3f72e9197b821d0b0ff2f182ae31e31d308ff1d547cbac654f5b76cbfb501db2560b927d6fedb1d2dd9bc85341be5e2f0effc7c4ead6570447997554a17d401ffffb333e98a1a5c27a2a0f295a131b0", 0x83}, {&(0x7f00000012c0)="e4cb2b341dd444183f6cd9e1720afb1e5c1af9fa0b39f2cb76ec0a6ff6d460fcfb52b3cf32e8c3b25c1c554a8bed4eccaf0eee47bb784bd5a3bb0c22797a4bbd6497904a39f4658a1fcdc954594a44243bd3f7332ee51e3b59c2e35d07cd9b342004761933180fc2c6f388eb502dff874a", 0x71}, {&(0x7f0000001340)="4102a7b4159441893f776401afb354b5e51d13402b62f633286360fa352ddeb712e8aad26ee474b0073826bc9cbfbf2ae171f848aa2cda", 0x37}, {&(0x7f0000001380)="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", 0x1000}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r8}}}], 0x40}], 0x4, 0x20) r9 = dup2(r0, r4) r10 = dup2(r4, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) 00:50:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2f01) 00:50:20 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x0, [], [{0xfffffffd, 0x3f, 0x9, 0x9, 0x25d2, 0x9}, {0x8, 0x1000, 0x3ff, 0x177, 0x3, 0x7}], [[], [], []]}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 2255.858740][T21360] usb 5-1: USB disconnect, device number 78 00:50:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x3f00) 00:50:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2255.975380][ T4764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2256.033778][ T4770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2256.269472][T21360] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2256.519494][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2256.639579][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2256.650332][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.660077][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2256.672977][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2256.682051][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.690663][T21360] usb 5-1: config 0 descriptor?? [ 2256.729972][T21360] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc01090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4000) 00:50:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:23 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') r1 = socket$unix(0x1, 0x5, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) accept4(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80, 0x80800) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x57d8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x248, 0x3, 0x0, 0x1, [{0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x220, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xeb1585f285f06ce4}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "0a897b136e1a500a34132e6708f75d1ed16b799d1ee3e2e8d9294849927da242d636cd2f1aaeeeccb6fed764b048ece76abba91d1a237c4e5675727caf839b771ebd2d7fd489f53a1079b7564d1054035edd1c0f512fc85c439c5f68fa7151cbc092c33834243f3c544fcbeea98845578599a38b8e1dbb42c85907d1d665a7593bceff678918c3ef473ad5"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c82bd33b65b756"}, @NFTA_DATA_VALUE={0xe9, 0x1, "86bf0b1e67532b397860b9d27b6bae3034324e55034696b450589ef99ba8235f741a28b14a94f8028b9f46246c2c0bbc1b94ea4a4af700c9de318daa0b641b9ab51685b055b20698a791fa4b0963cc71070fa7e6b8a0e0b00056fe33191b22429e0569ef08b138f4f8b93b200679818ca28707f849c7865943a2c625cd449bb76b230e09d42d8eeee728e9eada9d0888d51d2f5858c46735ee298307d0f8d2e9808747bdb3d29ad0c009d1ec8ed1bad96b3dbd9e3e2f03bd2f0e26419f2132342fe6fdc837745685bb23ad17139aba7c209a51b3bdba2a164d9858fa132ce9a2675f991f35"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x33b8, 0x3, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "d5fd4127eb3ad1c95230ee71327884e7c846f3b37cd0d8070131d397b3f1d3f0436c7f3b09fd930d2499668aaa3c2bf6bb663ce481f8d2ab2c2afb07afbcc29942eff3c8bca02f466c833934a05576077671f52014717830fca6aefa4797235afb9c990c81e9edba0acea514611888b2f66efdfe6c0b7fa3d78ec072c56e7b9d37d56dff2ba0de4418001bad12ca1cbeae9c1838e3624ee2485d44d412040b0050897ea4dc"}, @NFTA_DATA_VALUE={0xf1, 0x1, "b4d467fa0223febb5fe11465d0ed4abd140d55200a98df2ee9b0a130ffa2d6472a6569102df8cf1eed2adc78579622214e3524a6a0f8b570ed2294b587879e45a98a11e0b188be4f17dd3f8286e7c82f28f75f8155c2a6c6ddbaa21ec45c6011173712f60576ab63e9812608d131dc48b1617ab35941a4daf8618df779174b9b48c501a8979639c0980a2294f2d2cc116c880f49cfe7c22e67b8bd5d8901b0622629f3a248584e0d5b1ce7daa7a62556b4a04e86ab39c5c7f966aa25c8889b9f49a36bf79874234ee3a179eb795950f211416dd4a447e1b948f56cd45dd46539cbd7e10830b4bd86c3b2313885"}, @NFTA_DATA_VALUE={0xe2, 0x1, "3b23cd5583d0d9c4124e3947905ef03447aa05ba788656157a36cda900f42e55f49c8a2af70527676ea873b3708a59a90d8b2ea6e903163e9017288cc121c86df2e64b282876b2921167811929f246080d2727407324c0bc647690588ad37a44eb4cef455d8e46e1fdb1950d0ace492a93b03cbf6efd521128dae70a7725b2f18f169fc85e20a3ab3d566a89d75cde4a1c1bb9dac30fd0cc06448ff7786a8d17206d755d4b4088cdd028fdbb871d9e12e3450d7f264cedd88e307e5da5acc3269977459975f995edb12dd79597882d24364ef22c7944ca3fb226fa5c3253"}, @NFTA_DATA_VALUE={0xf7, 0x1, "5f58e135870f12bfdb9d4e6c63900a83c53a40c8170188cf6ce888997b4b1fa7854263e177a4080e48ed7a87e6b295c275974151f40ff4e742d7f5138f43479fc7fa6f44cf840472be620cb708eb0b88296310a70b4636332636f9d44644619ba514a3f482a9184339d3ece42ba08363610cd800755ac4c5ed3bf752085eb0a5e54fa9fed0d2567d0d5e3b75470e4baaa53fa2acb1ebfb5321172469342c906aa81e9e8211cbb02e35dc8fc21f88e5beb689fc1b03d3798cd80c8084eb15d029c8e6a486548de3d4a1027c6ec8a82cc575287f0a53b7f12de47e7d1f68a6ebd35ce1ef0b9ceb909075ddbfb92c1023a882f720"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x66e9d1e8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "e78caf18598797924d25a38729c139bc8082660452e3d298d99dbb6c9e758dc4fa4496e32c19f1ff8144aedf239b8034a73a103bb87ef2bc1b1e5a61a5c073b2588c59c5a2d64f087657fe788d11b3dfd8b27d91453ce276222cce121a0c699069474adbdf75711dec5cb93a93f78773db5362f3cce3918e75066393c9f568bb68b73be7132197dd3d600f0e78703104e395b32be444eaeed7b6898f0bc641a6316eb544ecfda92f33cc611a9d807cfa65e91c62ed7ca0d81d7e49c5e8851e8a029053f9e2bfe9de36c81d265974e3f3725f61eb355674e886c5d0f00647374fbd7481f95bead18aea42f271ca7247d5bf00aa7dd53c516c919c76833068dac65546f51513416ba87dc49fbe10f7b039ff9a77a6ae36b17966e652a62953ffc2db4be22aec8ee305b851fa7748e1dca741a4d8c7c96f069d03e8da314897f63e5d7c31953b87604d0ce7e32a8074a6789204fc58c3b9d85503783e5ccfd3ed2e369417e6dcf763ea6f1833024eeaf7b93f0a9c6fb94fb46e2c0486e576f81bbd1158a9d32f8113a460ae4912606f07bde008231962d4528c4010da7ecdd59fcb3e3b0703292ec6935988c4bef826d5c42b1f113463018b55428910afa3408979df4c57c37e34e35c900c089c81f102da73c88c50278bd0b9839c22eed54c8cc8786867161204a544b45e479a16a9a52d782954fe1e9f09ccc13cf9cf68714a4d1d80eaaab0e5b1a3f0e25b7c9867b378ed6ba937e089d148f2483d2596677e7f0a76f20e616bac53a0d3f57a3fb92e6a238eadc91af800332a04419bfd65d66abc1b82c034260e2e4ffbafc796e692600f472cc568a8bad1b4df7ae23c675b8e05421d55df5b4c257aa600681e09906eb19d986ac9af8f3d872b84d178dbaff1fdd5eec888aa4f36b3dae3aa81f62cc3f722936152213d2ec3ba10eed3d4225f4a39cec6f0b2dcc9e33e88679081b4777dbccd4c3f0ca5e8bf279bdecb61b73e0b75faf1aad51e77b2fbc3a4a72bb464cc414024a710c35962f39fd192eaac6b92afaf9f71be690d1a93aa9b5e0650705e2b944b5bfdf37cfa3eee5260584fd69c2e6d41fcc7ce3d992357964fe46cb03639e3d82750bdce2139a74301b6f1b60841658cf6ca6808110f6f979a795bf0de6b612864d553321871c3fbc17708ebdfa58809b3eb83ea751d760c0e443a956a669957fc8693a0cac57fdf3070ade8a7055d4007d3513896539d8adaeca15b287ce8cb8b91d4b20ccd4d29bb1ecb6bba93c785f8adb5478e81a2cdb35582f196d59db8388f48531e8d0c2b4177348a3f28b7cfe8b26e4a16a6e59063794db46346919280c907e041229b583a7dafeb0b95a2a943a3f61401f22ae9c9c21af649a8e5b3405f434a7b38e0399cc2e8c5bd75156fa5bab52308ac06004199a88d73b6c91274c44baa1ef4127871fdd18eab652ebe7a22904c05bffce679351d7af5ae63d042871d10c6aad3fbd7d95e4cfd8dfd620d0bac4edb29d529350491657e95918c17c684eca434fd44e32742d3584581742c0a1907905f0bd9a466a5811433a4a6a8bcb844276fecde7d589257165511493cad29838226421746e3e99a53513d3ec9d81c4380d37933f2586babd11a8b4a3637e4758601478ce2e989eff9685ce27df8e0e04cd01da0328ac03f0c1996d2df47bd974ecd55a212d4d844d16cee1f77a3842329918921f8bf0752f6809b71edccee8286428ab961caec6089a4ff6c59d3e07e3f85c4a2c479b417cc37706d5e9095f7255fe36130c886e0e750d76890e3e978dd189bd9d563f8f2c7427cb9c4518d2fe8a65ba2fa25754f4a78b26eca1f0b5073a09ec747307429f0f09f0da561fecf0b8a4e7a278b3e2b8d3eb2a472d0640f417bfa6713e17023142e34024b80d49e804fd05c4b3497a1feed90dd711f8614467fb26c32f33d41af8175a06e76f952687e053cc3ea09c891fa2e399afa7c4abc2a6943ce3899f2dbb8dd330832e12e52ef6a13ad4d4849163342ef1f8a69fce749fd0904ead46894817110ce01e356fdc3dc2be46c202aa6a570925872e8875dcdad8513bfbc7f4a2facf5f3c8db1a77c61b630e9a1a30cfdf4c2702c27ffa4fd46c45d72d36a7f45129f81a0e1a6f00e25378f8476a4bed69f0a9fda6e3b484318b24d96452c6099e20c01aff2d001ec3a9ff5322175c3858d4fc82cc32cf5184ff9620aa1180e5ed22f611c0340c439e89678a6227bdd1d5a3e06ce9ac7a08ecc4ea3d1051fba1a3ad575f28f36dbb487b3b01bb6fe4dade40a9c6962bf29292c8415a1dc343062cab0b00016c8bd342652ba24f6e32ef1352b8288b86c0fc3b7adc15213606568e5c3b444648577392539f485f9e18876c45f5fa8d1e856250344e3bf020a18f98a76ff93992fa5cf223a26fa96ce99c382819cd86450ac5e9a15a8476c43680b7eead4081f56aad9fe4f369fc5a10d1876d76ce0f0c5ceef0fa0ebb7a45ec4a5a29835ee63706fc97604e2f611c2f0f5033a7f0fbee673f1d828602b8867764833ccff1ba3e3181dad49df9b2a92432f7be98639f225691a7e5a2be5b750dddd4cac1c9714eb911db3e61610c0b9a25e55a7cc9f23e749207404ee03e7af3f54143027002e0d1d9eb4ef4b3c3f0384c780b3e3a48a0d1855722509efaad3626569705fb54c51399ee34c267cf6d0ebcb99a752a0b52e02c710aac5c16785e238e21f819275b924a4bb5a168544cc4440833cf0ba9568ad26df96681b883b346bc6f9075cf2b9fd433ac8082d2911f8e2076198f804dd8790e5f5696acea1c6b11d9978fc7d9ae89cb2565448d3f5531aef088a7bccbb29517e3b32c02ef35c8aeba75a9af3d5e4c5804a75b04c35b1f8d4a480dc8e31f4ff9a0653904c9b0b1806101a8d451eb2a1c4867f222e22c1dd5169441d9429cff2f60e75db532f353dfedb1603fb9991cad0bf33cd98b44ed2afbcc83486c9e8d7d21168e97b4ffeb4edd758ae4623e56e57f39954b8a685de5eb40a953b66503651027590589f9d76c39263e6748bf942e567673b656e68ffa521ad12d2317989985546c785052fcdfafac355e17957eb5d9940f84d44933c76e8de1c6a2647e0e35f2b1b94fee67f26092f7ff1612d24ea9fb22f09c5d9186663627a0c1be319c74079d4616984b392b761bfb0c211ade3901a504dfda2fbdc902231687d5e904a83b877b9496e48de935cff0143f44e8b62b13ca1b76a20ea3b502c835a0af80a73f977ca653f4c7fd44819fc24011739b100ea5ed65e9da9a2e88eedf17d5cc76ccdeb75963e40c8256153744f03ce322c9e4b7c5037ac056bbc16d9ba88a17bbc66d81c5d69f16ae5ab3bb4e6835eecc5077abc7c3501ff6ce70794ba15cd96b81f11cc3eeeb99b5dcfae7853740d70209da022abcf196059cc560beda667ad014d2e8c334ba59bc1b8c20e635f2d6fae76178137538565b789e74d2a99cbf03bad38977c98b77c9df8fc2987b4fcc02e8b6a2f29c6673309adb98d19b69f59f48f5cf26c2b4298b618aedb45bad665fdcd60a54d251e6af55816ddb3893258b96171d62036950b6e3297ea8d2209fa6108fd43fd99f175df5de267ae7ad3e4f38e4967d6133119f19842e670ad35c002a12299b34736ae08cc4cf783c4e70c931bcf9c15876c37129f6619c69e2fa31bb5a1e0d8a11d5952a13e1e9d9071f974fccd3ed8eb13536ff6bffcbe7018fbe16cb31dde564e95fbb2297da9e62d6530654405b7944b1219fa3c16575bea4415ea4d349e0c3022ef6b63d848466a0be5fbf0cf67e9bde4865dc7ffadb87716d0dee5e2cb05fb5263f64f8be73b313ec897f1577ffc416cbe65c00b3298f1cf899065ef1d5af77b7723245289be060f45bee3f9cca099f996e02245766cabf6b12fe4cb5b5bd06435d8fad044df532bbcc54275d50b20093e5b4980259ee6dba9b1aeb6796cad7de97aacbe326e0569258c9dfc2a7cbffaa54f5f5384d355639712880f40ee89947c6ba46ec99a648639e7028c1e76e9ee0fb87d1f1931b88726f369cd3f11640c5943f7d37866d8b35b936eeb4f118fb0a641b27202dc2be4baa19e74a8f9d55ea39c8a0a07b68a8ce56937184d1ac612ee15be5d7ec12fee662ac41a54553dee0a98d82d93a4234712016fd372dec4658432dfa2dc0688969a216850f713ef29a09d3772785f24338db8fb334ccc70d0fd9fbb361f4627f64633446d9c71ebae43b5fa8a20f03fa9ee9b5c94cdd6f6453b25ab87d6873e369cf5e19fc8d600e3c5fcfc0febee09bd43dfac280700f7922cf7d76e3f723f01a1c44689c96a70d79315987429f19f2278e2492b5f20d93b66e5a424732f3e33e48fabb7b281afc9a85edc690a242d49e2e414e43a83774fbd1b46fa29aff06243aa9c4fb12ce1ef36169630985b8a71e898d999f3c41cc24ef13e8505825139bc58d76c8540975f1e98b950ecd6b11f62f4097487da13c6f6f672faa74d769d2e17f2ea6f73c8dedf3b0d421255ddc2fa35b6e9a1c09c508d60b2aebbb3473f0cb3e2388480381716b2517d434e0ffd936760414c1a675f205099e5f2814b159040c6c9999b626c93171d552c3cbb585b8a390c01d793f5988fdc51d60b4445943bdffa910e09d5b0aefde3de408324329db5497986ba87418deca9c85304da8c29c2772df2535b987c83cea960a0f799932bc6761ac73f4d5320db0d1bc118b2dec16676569c506e9b382de2893e83f2d88968685c8b46b9ca9442d5b61aee69c7af70401af7bd18a7fb8bc97cdbad279610715ad136103a8fa6bbdf8f272423975f43069141f64cebbf60e30aeb76b65a44f1d9353b3cae7dec3e34324a5831fb035a53117e8032ab554c851bc3a07430a411515951c8975c4a2673daecf4b663f2f5fb15dce5a475443b059466a2c27baf315a0440ee68c93454496f32caaf21dc093b11791aebaa6a919c7d1e307ed75903e45fae407251748c264c1b11731fa49d613fb59e9e70ad6ff5f9526656f40f42d955739e189051c9fa56e72d55aaeebc6d68a05b2478f06508ec869293776d1f33aec350fb43a29314c166e73aee00b83861c91af547dd51db3cc5afa41f639f4d7cabd7760a231eb520cfdb79d468423e69304133b5da7020df636ebe05ffb67137ad24b4f0163afe087e7d717e2fe9ebdbb8c935d2f3c0bd6ea190167cb2be73efdcb8dbe1103290214edff662120783890ed38b7ae6f662518c2d3c46df4dedda512bab79957eec858e175b1070653e433897df2d9ce271fe4cd59d8ffdf6ca17d82be6d2fa49bd56de22fba9d82471e1536f77122a113b0a8ea5beb8a663e34ed860115ea501ef130a3c4871b1b887bd2e7d7b8f9386e1f40f15573a09566dfd90430f511f69234d386f1a393c83d3017c8a506a1d9517fa547a84b5ec3ac6c4b7c0bbce6ee2e643f226d35a40f6aaa60b666808a8dedfc019b27173ea029fcc57519ac199b36d1f8259db840a049d47426c8663fdf16f4844f2692f2de1c8f8f071df206f92d335b9ff88808d1db8d49335a138bebf9baf0018009d3495f4a30af62c66adf0dc7e87547ed7d3390510303b54141f02bbcea531b87fda7a540ecfc8ae1fbdbcac8d3fe5f4ebc72f58d58779d3a6f56efbb822a5bd6b91db367453632785d96c619922606cfcc2f4981c0e15179643ed54a8cd947d409bb169bd2e01dd63505e537552b090c203097551df0b0b669b3a2db2c38e6cfc831301e975b5d9c5a60751cee8b5895a3ff46c4ad334b8438c24fd99e00adac97a86982"}]}, {0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "54648e67db7dc84cf1afae19cd216114b42556af5d248318fbcbf75d95deac6d35a00e55b0cd82de85846759a9d57db8b4a695414facf85688f69c84d66f59fb0cc8c258e8953dbd370f2963af601557cf7bdcdf03e09b8793da22e3b63d26720a5b0e7a6457732d4337b9a1f1610c218d38450037e889fee9c1febfdfbe4923866f60a4c69e9e1f3776a25a423dd457da6ff4d89461b4686db033938dd2fab46d464c4ea0637c8e41e9378c3f68f482f3a7890b97cb469b2afdfa29f07700fe0d3d68d8a84a0e587bfabca1eaeed51c1563a8154d366a827f5ae94764577410a0c346"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x7f, 0x6, 0x1, 0x0, "ee013e5495f1f68c1d7cd1598cffc09bf7dd70477f81d6e1a3368921c787e034e34028b01d4062f23ee1b7314460f747e89024b1d0a3bab8528997d927772363158633a10a1e569ffe41c23055267a800b058b05704a0290e253a84a2b3c53143c1099c2dfa314ed93a71163fefc5a77ace9f68c66b4061317a1fd"}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x47, 0x1, "52fcb679d4a45f1d1f8bdb975d2e6df683aa037a342c5359bdf998306dfd8ca1c0750adc316aefebd0ff9698d1106cdc4abeeba83616190a7a06d6b1f80def24fa5b51"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xf10c9e4e9aabb621}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "86d59c5238ddb8a77d10e614ebae59040f96e004cd2db5205e9ed208e0dbfc769190d262bddc19c1d07065ed0a7aa5b137d874b65868554cfae6"}, @NFTA_DATA_VALUE={0x46, 0x1, "143ae2cfa50dc211e5f405deb046fb6293fbe756b1d56c9646f9ed04a4f6a2533fa6bc921534b0155a0201091cfa46c5d2509f1bbf0a79b0b47392160bd1e06dfcb4"}]}]}, {0x12bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "c926abb98b4bc578988f2513b934c608cc2e4812b5cb03fc1e6f3a240a7d53e82739cb0ede55e9cfbdfb749bf32d5dd92a457c6cdfe729a4f7438c30e8bd35268247f03aeabe463202607a0930824a38e0e6da99c7374eddc2f5f3e55dc4ab114f32c6d683b3e5648a096a9c02fe7121c9fa5353061585b7c1eba074773fb30cdf619c12d4d49618c58f68eacd52908e315e67e40211f5490ebb136bd219de2dc3d5335905c4aae6814009a7c3cc2f49"}, @NFTA_DATA_VALUE={0x81, 0x1, "dc809cf117ced32d7d044590084a2619c89dea654fe041294e0bde2724a9c5127c3009d9911891894965a3a4b9ec8de09a0be668b50f3012e8c2e64ec53437ad863938ce2df0997dae9e98c6072cb852d7cbd26f676af367ab31ceeebcaf5c4f510cf232eefb215db085a0b872812611bfc79d62c236db8451f8474559"}, @NFTA_DATA_VALUE={0x41, 0x1, "b47e1f9e6d628a2c84037605105426309803013bc5ef9f166d18efd0838f569edfaa38f5d9b96151eb61e16f79305bcce6ef4f37c1fafd395142f0c204"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "6b2fee8f87752caa304a31b11c39a9291a64998e31d44c9cba80"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9d18}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2b}, @NFTA_SET_ELEM_DATA={0x109c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3c, 0x1, "97d03bd72f0e34c55aae4bcbc0d53a03249eaaa41764359c18252d0f17d4c0c7056bb85d7ebb8043d02047893669b5bc1d317969d0178bdf"}, @NFTA_DATA_VALUE={0x1e, 0x1, "1b9b5dd7ce5410c4d18146b1d3c2943c032d65b8398b2403cb70"}, @NFTA_DATA_VALUE={0x29, 0x1, "4971ff1f5bf8204a57acccaeebba7f2684637ed83e7cf9e951738a5454a44ccd64279be9d0"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2572}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x7b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x354, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "e6753904222fb1eb33412e19c4807437429f88c025624978283ae3d6925827ab110e5ec581a53110c867778c52d501a56a1c27214ba5a779ae930ed878b2737ba09c2d7a51c500ca60113e454a72506bd91ee6bc9f18255ea34d542223a0db7f00ea6983b47ca538f954d44b885aa29435fa3a7944a50a36392b6a86afb500817407f733f01c2b212fc74bd94a4c48e98ae21afbb794bf84f052792163f39a12efc4a304c16417d379214fa9801e802e824ee07cdf88e236229c11c8f47512f3074d7d047616"}, @NFTA_DATA_VALUE={0xf, 0x1, "ed96cb74a7acce5ae14757"}, @NFTA_DATA_VALUE={0xbc, 0x1, "ed75f5bad1551df4c73b9eaf07c3cb9c1430969c82b6c5f92e3517b4bee99d152859573ddd14369dc1326e174200aa669e37a2bb2ed7dc782186ca066ab00ac9ed249fc48b0e05a9c97957ec489f8e728d5971ffefed09974292056706902f972b8800c8d551b742324309f0846a71e8f883ab3c55d36c80dc2f974f6c66fe0d1f80f531e7cc41ea055d0ab61b74afc05c38acbbd71a78b879d75383c514aa858b7f403fd9129fafe0bd306448423e4776ba6c3ad285b2b3"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "9b6bdcd4cb818f95ebd871b3a0f5d8892852ac786461ee2e56fb90cf696ca035eb6baadfe6318c052a193f8dfd8ede17b7c56164496a846b18ba311439f778514d7ad2d53fae1f7226f9e64ff2ade4c42b944082cc8afa93c97a98f852d21822fbcecc89885017a3211a4ea3c051bb1d8b6acee428649361580639a82333deafeef1a74a29e8920887f9bfae1d3d90885f4bef2ee409"}, @NFTA_DATA_VALUE={0xe0, 0x1, "d4ccb3a74b4db9c3a50c67a7d4a42a658b9b58a7b7abb35ff52c116cc53a2876c38003bccefe6932250dca65908093464136994784eb2a6745ef15a77e21bcbef8e692d2d3accc02b57aeb9b539d9439fea7f54209cb0b9047ed733378d3bcf8d1fdfcb415e362d056cb8237d571105857b99e8a8f388ecb0bdce704c63ad8e07cfc17bcc7de65465df4b104d2091f368715c071e126fabacf53111664ef3c383233f88b10333ab7f864450302a9afa06ded5bc191107d5fefc3a7f0965c956511ec0bde56e4ecb4d92f6b4e76ca8823512fd8980ab9ac4528188576"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "4b2236aa070286890995709a8f1f3153cb4adc595edeece7448c4853eadaf51177457b06f284d41e8482b6787759325fe90f3c1ac4f109139710e00d256bb43f376af8eecfefff800b3f61835ccfccdf522a8fceeba459d63f94d4809933"}, @NFTA_DATA_VALUE={0x5e, 0x1, "038e885964f23c8035b22afe598dac004f05e71b20ee4f84f62d6de448e17e5992c9080f355aea753431035d5016c85ec14a0799f28ff164c403b5999277b51db08f51e7f87698b42196d9903106d9cdfe6c41cbb42d6a91b81e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "3993d5e6891689643f702199a1e6d3d64b802a62eff0951814fb55250fe3d6c0154073d98cda142fbb39f024c8831fcda2e88b3272a63d139749ba45c7cc31cb6a3d2107506345eafe6f68e588cb82a0cc89192b6e24c455d19089964cddd0a81be139a2892c22c89bf4a09796524a39de5e23948994ca098e7a3d6909d44ac4749ad025b4839db3f7"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x219c, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc0b5}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbf, 0x1, "05b7709d4b80725dc16e12cfd16e7efe2b8cd4f1982c13f4da5b9ddad96fe13ebbd186a3f27ab552ea8d6153885c6619712674090e717d1f1d3a74f17f76b7b69ca0936aa8f4cf03e1db6649c877fe0a9240d4d5dfd3ac5153e6b145c86ef2a3e91298721f4ead27edb5ce750af2e9744a13b3708ba2aad2f688ea9625c4aa9e1b408c590af9307c56aba3d6ef532b1d35979be2b8c43bcf8926805990ade3d51ff0281b534914b80d09bdc5ce66df9005c7cb1e515d662ac28a78"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x57, 0x1, "86567e330017cf982161ce10f7b7fca9e8e61447a6a58000bbef09fa19e7493bb564238f8d74f76b4e52c790d3a591212adaa7c9013432e029e848db7d4fb2351466e2bc5655d88b9b02733e2b7d553dcbf555"}, @NFTA_DATA_VALUE={0x8, 0x1, "0d440b7f"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xa27b0554c39641ba}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "47d05c18212458d1f996898f7f6e7b25d06284c3b56e1b560c67d6b409f6858334054b2da1f1eaeb6d96339227f0ddb26be44edc857dc9ca6572a21813e6e4b6f4f474d56f4f5c5ba042a89be8f54ca4ff8207128d69bf63c01c19466c3c8f9fb38f23b11c192b60d34529b390aecee3a5fba217bcf77ca59b8674dfa1e8a66c7d1787335035b95bf07995138ca76061237de7446073a23ae3eed9ef09860cbe2b4be7b28f82127d22b7408a5098439b24f44b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "d0fe91c58d4c82e3d36cbc57748e056dd2910934e9f53b9002ee4d2fa44a8bfc0ea9031d076d881b36152f446b63c2fbf92951c3468d6b370c428438336175f665bcf6272e61d1afa7b0176007305fa228592359774bd68885ce265b6f62b0165d0bfb9232b2a56df2e6b8bbb6d021f0a27bc35b53657417287af1a00fc6aa80c42a52cf91a618f4866eeb0ce45dcbac3f1950a77e4f2ab719788434770716f6ea968ee1884a3412b5695576c73bc3129252d7496d86d78b388ef19165acad092f711a35e3ee4859b68189"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "350caf2c37f59fea0a2bf899ddac55012a8227b8794d4deb1f74d4a0e3f33616cd6684c7dc5ecab4a199a01289b5beef337890a4938443a210dc7e6543e85a074f9284af2e49165a90af9e3531dfd9707c1b487d571f450774d185e81121901299c0330b0c0c5ce308d13a2b4bfd18e06d4aeca3b0c4bd8208b4928c0c72a0d2c30a55a284999ca7e3e5440e02c778f0f6e2c51e9284bf13510c20c5303a50487ee8a4f48ffcfcd53873d8db7c77be4610bf03801f7d42d05027af158500c26e01ee459f15dbe24ee044657d486f391625b0ac165b67e4c862cfe56a660513ff77270b6d8aae20"}, @NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "bce3322b7a378d795bf95108b1792dc34daeab19d39acfff977f6429a5ddf54e4b19a5bb7b3662bce5c4829006ce0f55d529fb9db0f7075961f4ba6836fc07f118ad920647fb985383bf2bd71f80e572fc57f8d2215180ad1a9102cd5bc330f4c6fad82907d20e00c68cb17e84fa2960586192960062b5a15af5de5ec602420bc10d3a400bc4073abe39b6589d04b11e45da185eb1f814e245908e819a7a20d98f56733f7f62ca308a076f38ec192e033e587ade43116969"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x4}, {0x1bd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "049ddcc91ff8bfe44b0b1b790b7e42d45d61171d0c7305e630e2c13eab9fc3f6cae219122dd30cac1d1a465423dbbe7b5a800bd3db41351a05df7f2dca43bf7e794c5b457902321d3fafad69d2dcaf191ee7575a8ae7df64f226be421d73860c407f698ec8a4e521f8d86144008cee9df25464d3ba560e7a5cb4ac707290a6bb128ef51e39ad2fe5d8330a04a0b197dd771ed8d5b65a8b15bdb8db03ee4614523367e63541d7dba0"}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "da4ff8b08e66dd340e90ee558b9926e7a06affffbd093397a606c32f901347e4981ed6224a0dddaed59627c16988ae26f59e413e3c49c3cbef4791b9381db33500c739b4821c81c81d157539a8fba0177d5c1fd35b501729727474bad4e66c1c61f1ed13a0a4420feea1aa6a9ea0381fd04f"}, @NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "8b2572be3a80d736cea65f91d173e4cbb09e39c396f32ce52b70050b954a42235fa4f55a0f192404e3f794cb7f9028e2c9560a144e9b3e7efe894e5d6d895f067060b06d63977a0dd3ed382671fbcf5f588552bc3e51959f172017b1826670e2142cb443f0d6b94b9808dc4038de68ab1b3beff0c822419eac8674adffb1f73b0cc4113df7a9af4a4f3a58ffe2d4de239c5d262424314af9d0de228abed6072fe26e02a62a28b5fc2e2ff483030cc0add9d230579ff9631d19ff83a36e6f44d5f9dd62c47e8d85bba18449fd57fd0bfb0b98f4f7566a8e9eccead3c7f79926ce0e891ced8b2e9817d63fadeba7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "d1736f90e9329e5c0c268d45f0ecff65fa7da8ed7a9ed97698fccdf02022f3f3f3b78175c294597f87af543297f44d56426bfca85ac8a4c2cc783c608604e0fe95de16ea62cb072fb07eb5efcab8c821a3c7f5d6fcfea227b112"}, @NFTA_DATA_VALUE={0xe1, 0x1, "e1cd5063e48edf7536d0e3c78a234e2d3033f199e0e3d6d00837d7da3bf1d539fefa84028ed5e0510a93e0b82288ba8bd5329ed0ceacfef96931ba864e5a51b0fc052a1523992242d42c9897169448e1824d922c216852324386fa2b705629f48dd25315f21d9d82e316a41d64b5651817983c435853b830fab6f8b815ee0a90105fb171b36be320e6b59a9f468f59fe852d74de154791e187390cb03c426502c3b2e11fde8c85083563df64bf736914afc261fab55bf0d9dce35c5ceb4f7ed1d8de48588bb4626f6ac4e1f860262e893d35dbe01ab7ef6998abb43829"}, @NFTA_DATA_VALUE={0x52, 0x1, "c5ff65ddf35e0bf63be9d4614e88f4e5864a13386bc62b8c89dc02de3a1c73274d5c4ebae07946b2e65c66e5344451af658f98d2cf4bef1b7ccf6763860c99de0cd4cfd39ff34ad58361b09fd5ea"}]}, @NFTA_SET_ELEM_DATA={0x274, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x14, 0x1, "8703340c8426404c6a8a28c6c70b174c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa7, 0x1, "132bf4f99763d1a84df355e21b0f68d246a2adb3bd16239348db4c4a0f9b8854c4a3e8b60129372dbffacf586f4e7ecd71def47a008aed1f4b1d00a57fbddc8717cb532163bfb2e39433b149a60e1189598115be110960617b963120a70a5c44c94afb97c06dd4580b3f0b829aaeea3715014782e889a7904e8b8f22c7845bd556f9eae0840b5cde3cabcf7b7083cea7d6518f2f33c1f884ceb9e970449254717c76dc"}, @NFTA_DATA_VALUE={0xa5, 0x1, "ec36c453dc4736d3095059d8ebc5c771fae817597fa021b3711dbea6f1084139d47991a0172faa5b8841af34b401e1995ccfcfc357b0a9a8e8bb9c2b64558a5239d01c8235f9f17abe164ec6ddd866189b639b761d4e52b3e915384880dedbda4fd521c7290381de05012ef892e8d43622d3a6ecaeef21f5ce5c3888efb5f361f4d946b441550fa31ff599b206544d51591d112c9be716e40527d5fc4e1d1940b4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x31, 0x1, "bdb22fee0fe72ed6a945a4bacf4f621b5d021459b8558ba81f1f450b77222c695048897ea45b460815fe85a595"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x34, 0x1, "ea90372999882bac943a96efe33986aac6f6b99f8ca3e6a1f4b095c8e8e04ee0a44b92188d3df6b16d33e76539cb221a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x55, 0x1, "4f3407d00e825eedc69829f27347326a5ae79f8b62cbe3f91c53fc35131087cb097797f32865f3a01a23d8edb33b8b621187d0361b601e945514838fd3819a33b786c82fd44b94faed9e82594dcfa052b3"}]}, @NFTA_SET_ELEM_KEY_END={0x137c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ecfc2d62ff01c090481baaee0f75fe12d923a2e6908116ccac6af7bf1ff1347fa2409499f34bcc9babdf76f3e4126ed9cd65afcfbec57051e30dd43a5a1c837f2442399da2ce789d25843562c444a94ee1f7b36717eb23322265ece27c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "53f1ba2f77c73f127422e792ecd76901bb9cbe2da4115257ae9beb83ddc3945f4a1c96b52079d18cfdfec028213079cce562d2cd6f297d05ce1b643771952c6f9bae4f8bf9b5750224a2fc0e6aa53be7e78bd6dfcec6c721eb90ad3a1da208101b4aa8c743d6f5e3703712056a68fb75c0962b91e4906d46528bcbcefc63c84d8be9f516750d344fe70df0eab73b74272753ccf71e296c87daea0ff54755be380d32276aecb3fcd6986afe16d3c769b3f210ddf0dd030a5af3772808717538b34bb2c56e7e5958ecd520db1dc96be7d62592c6e78f3ff0d9b38163198839cb0962977607dfa899ed21199af752119f2a57570b4197faf67a6bac67eae4ec107f3c10ee50dff4cebd07642b1b5881ce8f5310a6383844757f6a13ac53dc3da4136d74981691592c6768bbf7e35cc717adae1d5e753140dd102b122f3075d20785a66f35088e251f7ef54a9475519385ebc2816b73eb1607a5b08de4112a43712648483b39f16e744521191fca9f642ee50fd6334701c10c4dc36f6ff1ce311a84fcadd36b6ad81eba69eb4bf40ac0f00c09e5f91a544e984e2048e35b8fb03fc6775b5a9c05a187594d731301688f882892f5d1b2ccb796f5f3ec663429e34e34bc69a7d11842f7ab75174f16bbad019bc5d383fb89de78ed41e9a36af04a061a8dab5af5bbdad3ebc65203bc6658d91dbcb87f24e20005a21bbf53f7e44f3f012958189b89b2a5e48ae0aa7ac3088ef60fbd27bafd49ec8edcf899abbe981668839fdd42e317bb68637c82862142ed74d133e5eafa9f2e67c1843f76079e01b4507d96fb9bb6763fd46fbc7e116c856e9c9293672bf41202fba2903e5e1e89d9dc7db0e23b2b297cc8971fd0e894452dc20675df4a44c523e00c9dfd8d34c37902a68c54c1d34d0a4b8398902247fe00e6cf7a4394e8ddecd5ce22bd8a372f8cbb5970f2cfca50bdf01c564e00cb9727514d3b2863ccc273e9faad31a4719fa3733bbc1588c19b062c06f1d19c25580ecae8fb8c6186894a3740e54b7984fa8c84baeaf809be2e5ffb32d45ba664712e6d59a2791e2761aed5d6474b122590e750e3226bd7ded69e0d19d626bf4d0231120649f69f940d985bb2e81ceffcbcdaa9d52ca5135635c1afb7156216a56f3bfa49866c81d4f06ee9c6950bbfec4b500b473ac493938c50815b7c9288a6c9580c5cbf2df69130e1ec3c5aa16a21ebc27f8ae3725cfab1196626bde9bf2daedde983b5e827b0aa938f75ebfc0e8ca8b3a15b1d073976ab2edfd8f0f9c4a4e27297601cbe949ee3791d7bb40d6329cca5701cd80869b366d337694474511022f20d26cc5c08d66f014ad42d819272f1df6f8c862d96d712e38c09c44d96d256af7aa783bed7950f5e769bf8bf02b7a955bb9e5366647f40f3358235f00b6a9103717ed53f47a20c4ea7de8e630be62be98ac8f6a81aa681af21e9d8afda9b4e23dc2296ef226dd3ca8a744e00090d81bf9ab9d76238963f82b0abc8a4c9f09781ae2cd0b6838b4377ab532206ac1dc0fce6553e414655c0b7c0ec83fc63990a07088a6b1cc49836a710d45360e1c7a8f2b025f748e09b76bbc297b61da9f918fb80a645e1bc48898e12ffd17c82d595317cc6c59900e2180d1012fb0c3efb0079e6864617a667dd6db21e4ff898c55933ef2d5cb7740bdeb8e8d9fac57ae9986937038303fd7cb66175c8a7a292dbe9ff6fbe080887325237986aa51616d7a0b4e6e46cd0715cfbf3f02a0751815a4b595607fb4492259f5ae10e2c1a0700b7902435e2e84e426c15c25840c0273bf64c5de270a4099860fd6bfe2d8e2fa30d7c36c5f05975dc196aa9ce1b7c207a3fc15e99381eb0bd7400d07c45ea25611b4ca7964639e8c2e076c396f74229c47c1c3c9825da74b1eb3ea97fafc86b1e4b2e5689ce5d69a804958d08379621f3815aeb2bf643fa9b3743c1e6fa12ade3f8baf9fa1b96dded34d26dabb4a61965d4c1d0ac4c5938f20a38452861e821f1118f7b0333476ef05002d4a61dbbf88a4c0cc1214bd9aa33b85fc92fb1d79f611e668fae5a5249a5edcbf4427a64e766ab18f41b75e0fdae951c8833b167cf40b8d38225a62fb832c5e2ac8466b3a2be8b411003eba5471d8adacce124cbf664cce3ba72c590e3759ebcd6951c8f44d4a527acfc3e4b9cb515a37f06cc91d0492d04722a3f797b7899abd29980bf0121837c09bcf2863187c0a6746d1cb14e7729b968e2580fb4bf1ceb9bc83c47a2cfb7d7ebfbfcabb828b516f9f98603acbac8ee9a11d86c7c8100921d38e3baae9607d5f64d31e803ea57257f65b712316f175e7d811a18b0ce66c1b710e603202fa39374d05c532d1c70e47d36507e96b1e783eea163d0e57c69b68c682e0e06e1eef7e4ba447a9d2ea711ee58a28055029154972d3d1072e0dbc8331c8f929f4754ce8b86f73aeebf60af63ab60245e00622bbf39fc3128863ca81c5aaf343c6472359a48bfa611d13fd5f4a890a4afa33872c8571a920d258a3df91bd9bc914f97bc10172a3a9bc22e8696d05b9779dd3ddd2a30003bc752168b6c26a85f6dba499dc27b32c6abceb0321577af9697a1d66961768d63e22c7bb1d07bbf9d0b9ad080c06426ea34531afdfac8e343485960db0dcde34aed253e776e3ab9ae3ea20625d10bb6e105dc7f6b914ac7135ebc133d9be6a7a6c51d5500f49ae1d88c703176f7b5a0cbd625ce363efcfb0c653c7b4b29ba0a45160e93337b7578794213cd241c137bd881d0bb13363b319a2c510f4581b317ae22a1c4351a26eec474d65d7d808d7038acaa249dae2d2f3d7698024dc9a61dd4282291ce5a17517a8932c232d80b93352333bf82d07e42d0254df4ed38cd8f2d9762d3147c1163892efbaff9931431c5c6c584536caaf3781eb0b6266b6a6a73df888d23c9113543fd24f531f8a010fdea5d6f9fbe1d8d78a0258dcbc268abeaf871b15cb67b2b525522e3e66c4c1bd5806d074792f547b502d87d8bf386f40960d310f19316572718ee810cd84c197fff03c9bd7d3bcc8af86ca7794f118432599f875104110ac834e1381dfa8d6dd82e85c4c96e104c3050b62a99584fc4548bf2106afe7a449ddb1c1367462666c26dcb248d2c027824340a026736f480f8598263d84b19f5e03134270693b29b1b987ac7439ad23920348b35dafe9ba62007126bdbad95314f6c192b771e25fa4bf198060f05ab95e82b71b6b0d43bdb78b18de94bebff8c48b21445d9a87c482c5c3f74c26d1e92b98cc0504726d124a4a6a18db870fc3d93c0727f41ad63a558334038f0ce293593436050b56bf5d2398427058bf96d51cadd125a2813810fbdbc3847a6054720daf58d94ac3e87df29fb0baa01636bb1d80599958ea21dc090cc8e5aa7c1eeaed10555cbac3dd887e0d2168e35e3269a3944410969f482d8300109d19dc9b4a8a16a0a4a999388f14f05aa3695442eae58cb2137ebfe7e3af9a8a6f00b32e1be8cf73cf821342a7053e7ac4293c8e6b0b7c73b30d472ecd585d5d9edf423122d549c4471c2ec3a596039ed7bbcdd7caac69166012c8f9f677c46d548aad8a8a1978be8655532286b105985cc82847d25d8fbf895d2c450145d496ca01f861c9ab99ac15ac68cc02a6bce20748ee95be3078fe93ed1d4960ad04eca3f3ce69f39b42bc2bf48e7cb38ce7ac50f93081fa4bfc6059329c0ff2af56c44a9d6093b3d7718d20092f6a3afa71f8f4dc3b868d14fd6a58627c06f4ca5ee805e16ac57e3d088bbc001f90c91a01959b123b8f632acf6fb87c44c4dd6723e41b54d53719f3a5ed20dccd29f6cd0a2b2668819f506fdc34ef1b7e6ae5e72bc0df1c98a8be4b03049ac2a71f2889accb89783228a09d67a7848d16d4daa7057b169c0ce9470a9236eb480e5f71f2f255d2af2062edb6135d5616c4f591388e6feb6eacd2aacfa7cbb00597c54f3f36f574047241c467db49f4fac7b98ebd9db7e13f884fda259e2fe5fcbc644486ddfac44eb397cfccbedc1c8ed7927dcc3e596630f60227c1892c4c43d6c7ab711e2baa6ecd117efa6ce573ade6ee1162a6681d5143e9e08cf307cb667649c78dc83568f95d69684f08c5daba90f3ecf0be69452bae24a215d1026edacf9e413f3477c38ce12e9eaa34207fd6e659e64c5e0514a804dee8a750c46b0f3ba1f875b9944ccafbaa53c7c4db9fa204de25c2909ea586bcf39cffc8b57fb2f3fc5d7597d670e55343c64e94ac6d74e483182542826605972d05b0e2c462586aaf52e7c86e6e64de768cdb4ea2cd8a802bd282039f6faf4a6afcf456c806ef4f441a918321d93fa187b82781bb3a7fed8b64d9b9960627228e2a83db9adc084d6ebecd3851e11dbdf34b4699413d2d2b89bca1e47cda168fe66d099105f84b427d38815b06152418c0be80d7e94f153dcd4f7fde72b647e9572af7a8f33ac6c06d9f26fb032035991647603c7c54e7bb778f9c148237516b170501fb2e62437693aa99e2b5b223b16c651b1474ef7c14303b562bd86b81e6d4c9d16660250e4399e6ddf8bf0e553a0f1ad507b9f6f70f2e515f39f431bd6ebf81c544e4e4bf1c3fc897cb857ad11d4a089a6a2127fbb9f8b6bc6d9db7dbaad180ceda50ac8d05bdad19baeda4a194fa57c5109b30a72d381676cbe3c3339bf86a32c87f7f8aa486e8ecad39f7e13e9adad93945d3755a352b3662624e61d86fc2cb3c1c8de18f061501a5431e484fc32b922b6027e2dd2815c4384eedfdf704fded7d84893b8cad7cbef7b71c0a897d9c8056e71cbd40e3a5b6e13674b206b390665c97eee6ea8cfc767552772899adcef631adedf2705f1b2cdeec32b875634bd5902279114bf00e6d96e8d0faf92ae3c3de17ad39e5f45fd8f348f6b835d93dee4760b8b643cfa14981c647389365cf26b6da0e0bec64fc8d360600424f1a8c1ddcd3206d40d6ac198492fd8f16d6fe8a9b2faf75b2f93086f100a11905bf6fe99cc8fbe78a0b27fb24212a990a497bc4ff5a2782d6fc0a0b2edf95a9707da1a8897b9a6c5915adc01b18bebeddefb02f1e58218468ca49898b52c0b4e4db9aa38ea8f8d761b7bac30cd34791b5aeae676799817264a73b67940b48a57545840e568db88292200fee22a6a3cc6483d04c904b0f19575f2f804e676666758661f3486dd66c015b7538e8ba762639bedb12219707cc725f56a61c7b89a9b6c4219a810db63b513f1c437ecff9f0abc0b9d526cd4fa49b08a1f2da710f60e1663474c9c652efb71e85baef087d0f78f46a05d79675f673934f8fcc380e209fce5d7819e190de797b8bf780663ba968867ac88a31badbe4d062c09bcbf468a62bd8f9a8fd6316195d93233cb33462856ada745e7c451027c56153c38fb3017dc42ad22514587b1cbdc9f2ba2d24cfb89b42a9627072a99aaa64e7c44cc62d6e6fb4f513f3173dc43162150ef623ddfefd65f4c4a6a4b2c028642860b4bef263366d88b81426872011b0f64548bcddafcd1a94998734d5baa8a6dbc1f5da4fb4cec6a8bc1fd5b390403bdcca46589501405f9b392bd330a13c81e79b272c4e860c8a072eaf7896d287610be92ac3c96cd2565d0aa8f0835376f354826cbdf0f5a9ae3769bff8cc4217b7a9a9f67b98de7de69b6be67393d35cd576e153ba73c3095ab6adb67d60736009c4d23360a7de5ec48f2607e4113d84a86ad3c31eb11ca45c0aeb034306dbf34e09b96cb6ed9389efb7014637491a6926867c236b7a4bb35921e5073298dfc91ee31a1ab856674cfad1ac332044e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "b6cd2efa6fd733a1cefd5eae22d4b4165a41033f38dfb6878b1e470b4a83f74fdd4f0ed944e7de9c9b72f8afb4d609bf3de4431f344e86bff8ebae2b8d1fd3463f1a0b011ed3e0dfef51721c0391ee0d0aceab33b82b3535525fb36291284d5e63e8268c9502b71980611006cf11f30713ef9324274ff5895be215779f432ae2b7c5db582ffbfda1616305bdd176c0ff9459cdc33454049d8173addc3ba71c68982d83aa7de1f8df6187ac8cda853c80eb97d5435ee679014158ee932d46ea5c920b85afda62c2f48db2b284b4824b4c514c34d1199b07c10db563473d7ea44fd3351376ed293e3175fb57f2a7208d"}, @NFTA_DATA_VALUE={0x9c, 0x1, "217ca27f5165a12949467e3358f12d0b5f42f4be7180c8cdb8d66c120812b6ac3bb3d2cd70cfaaaaac89dead82482ed9e3850504d0eaa9e1317e46a11d8181b588fe00ed8bd5358fa3ad680b884f8e4b37d5c84504369e52c086abd2c05c73741feff04343dc40f7ff639857a342f98e63b6a3f171bd575ede14b7ea24e582c6990574e524c69a56e416edbaa5adc62f3a1713020d55da60"}, @NFTA_DATA_VALUE={0xc0, 0x1, "64c657710d5ff40f42549f9b26cf3fe9d6f86bc43ae6a83e8ceb964200de332d106f9f5c727901ef6519c164a536a9ff0f8093b4d070569496cf5edb96c66e735cb711635e42b1e8bc019a6e943fb1cb75e4f2e68e6e49e74e5808c465fe836a43e4ad5d1ecc0cc6c6cce0bf88457d974d0f3eb4e40941871d45e47ed89c83cb1abb07f03025601d062e42888487d63a1704adcf63d25918c6e84df61bd676b02565dd4ec49db1eda87928ff2348ec540d2425d38432488cc8cf6591"}, @NFTA_DATA_VALUE={0x7e, 0x1, "2ab90e4dddba123211b03c7800bbcc4ba7c1bdeda2f2fe14ab16bdd95be27bd945ea41c1397c08da552df207f8fe2a6aa536a1e7ded47b715fa354d1fdc5e215b5fa10feb139e2f933464be560a4db38a736605ed21113d443ada6f47b72a2022ea0169a990ad0b438f4a5e805c0c21226b9dcd48a07bf770dc8"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x57d8}, 0x1, 0x0, 0x0, 0x8050}, 0x40010) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:23 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:hald_log_t:s0\x00', 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x40) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0x9) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_aout(r5, &(0x7f0000000a00)={{0xcc, 0x45, 0x1, 0x2d, 0x9b, 0x6, 0x268, 0x200}, "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", [[], [], [], [], [], [], []]}, 0x1720) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2258.888426][ T5] usb 5-1: USB disconnect, device number 79 [ 2258.917681][ T4786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:50:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:23 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4800) 00:50:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x1, 0xa9, 0x4, 0x9, 0x92000000}) ftruncate(0xffffffffffffffff, 0x0) [ 2258.947142][ T4796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2258.998854][ T4809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2259.012497][ T4811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2259.299495][ T5] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2259.539501][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2259.659627][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2259.670343][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.680113][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2259.693126][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2259.702167][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.710827][ T5] usb 5-1: config 0 descriptor?? [ 2259.750133][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc01090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:26 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x3fc, 0x14, 0x2, 0x70bd2d, 0x25dfdbfd, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xff, 0x1, "5fdd0dff7bee54da02dc25ad30cfd2e0947bcf6c09ec1a2192a7d843249f9b47b542e53d008fefca2867847fce03a425632cf2ed2cae2cf02092fe72a8a44338a4fb4fa1bf7cca170f175afd3d76a0cb1c18f01007992776e9824fca91a02eb297ed9c804e5d823b25de48112fc3c27830a9a6aca10adeaa5bc9081918bbf5e6e3e7ef89f22095a5e6ba25b478c7f7d53c113afb8eadf0225387e96efa3e14ca2404528743fed1be9be6b33250b80543e3b22b676092e591185e3d447b3ccd22112853cdb89cd2c6cdac7757243682acf0bce6606647685cda51960edd123d5e55879a98a5a7e4bdb278e603d1c4b4f52366b80446fd8a04e3d14e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "34ec2846317d9b9db6bb14d68fe3569187514306356477e38d1e90076ea9e8cc7034810c3c12278604d8d9e324844b4d566eef97d1b6927aac4e63ce15747e9d6c44b0a060caef754de8d567236f9e847f5d693e38b52852947427e13976449efd4399fbba9d290076f021f2234fda5220186d58cf9b43437ca006e43d1fb532c717c4a27b98424a5310580039cb0a142de89a9de680ed21b91332c3f72da1770c47c55b97c488"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "ff164c19ee5be6de33a59ef713d1b542ad868a2aa16075b0048b22349e4b455d959e1b58896d8b28cca3133b4fe15120f3dab727b07a526900dede79fad03b1b2f9f454356353799111ba5df"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "25b26fe5b58354b1a071d0dc350512d5a4e4b21a4e7284ea09f98e229385d9c671a6d835428aa76f94883280f7ee54b4fc7dc6f868a7d259eb90643cec6f5bb9471226299e9e90967a30d0a40ea72adef90da67da53b9d4a00bb0a6200801ecf7b917fd9589212b7057842a4f6b31a0abf6e6a4d8616db30d0d9ba14c18d6b051c385d19fc4899c3aac8fc6e0989"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "72ce6cb9d549c5b9fc44716f0563cea71768fd90047cb651a963c349ba681d4f5f830ead0b4f806a60f1ff9704e89a3cb8681a5884e708439477bade2f30d6426b535a60"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "4479850ae17c8e21cdb25e38f0c8a949f52febf2223e28428b5466c8e8f40e50e653a397ca99330957ad025812d38a1b118841501acf779a146c10"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "23fdf7b26ab7203852968151b2591532c98357063e7cabe782c12b971092344daa3b96166ca04c"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "01a1657e20ff176c2628a37368c9173855f74dd213e635edae23d73b01bbcfe0f1e3d7b056ccd5850ebc09f54524084912a09ce67bf4"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "34a9b39d3845d8b85b8a27f5eab3db136ff92bcb847d07ffef25d455a53cbee107bd1e2cdc6ce2f5ef63cd0ddfcd90502579a3988a1fa86247fe021909fcac0f24fb71738eb0cb51b71c56f30b53ab5dd524eded80b32deca547f578be0496a5b364"}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) fallocate(r2, 0x1, 0x80, 0x80000000) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:50:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) bind$pptp(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x7) r9 = dup2(r4, r5) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x10000, 0x0) splice(r5, &(0x7f0000000140)=0x100000000, r10, &(0x7f0000000200)=0xffffffffffff961e, 0x8, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) faccessat(r3, &(0x7f0000000280)='./file0\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x400) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 00:50:26 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4c00) [ 2261.908385][ T5] usb 5-1: USB disconnect, device number 80 [ 2261.925646][ T4821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x1ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000040)=0x1c) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:50:26 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6000) 00:50:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2261.949110][ T4832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x100004, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) sendfile(r7, r8, &(0x7f0000000000)=0x8, 0xffffffffffffff81) r10 = dup2(r0, r4) r11 = dup2(r4, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2262.001289][ T4845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2262.016318][ T4850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2262.329486][ T5] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2262.569508][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2262.699581][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2262.710339][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.720097][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2262.733020][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2262.742066][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.750872][ T5] usb 5-1: config 0 descriptor?? [ 2262.790165][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 00:50:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:29 executing program 5: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000040)='threaded\x00', &(0x7f0000000080)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) fcntl$dupfd(r4, 0x406, r2) r5 = signalfd(r3, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000140)={r6, 0x0, r7, 0x24}) 00:50:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:50:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:29 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6800) 00:50:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x628500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x5, 0x6, 0x1, 0x0, 0x11}) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000200)=""/217) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1f, 0x2000) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/input/mouse#\x00'}, {0x20, '#'}, {0x20, '-\xa9'}, {0x20, '/&'}, {0x20, '@&'}, {0x20, '$}}'}], 0xa, "91a12b526cb0411c73a693f65234c61f83b7269cb07d38928e86a6c6ab4c78a3f25e8948e33c98130deaa7bfa67e900052907692b55b86f1025de08a37115286892f42a5402cf5996f4beab2ba0231410163d13b49a19bc8c9be31aa0fd9226a479d095cb00e300a4db72eeb167154927c3198ae7c3ccd3f742744c6fe7422f69e991e376a0c960429ac1bf01a52c3984bf73146ee15f0a526fdaf26f70178b784c27761e958f7e69d5f6b03af6b47f077f9dc6f39d08b139679cc0b4ee99f2fe5900b894d83"}, 0xf3) openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = dup2(r4, r5) finit_module(r2, &(0x7f0000000000)='/dev/ion\x00', 0x1) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2264.931438][ T5] usb 5-1: USB disconnect, device number 81 00:50:29 executing program 3: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = fsmount(r0, 0x1, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00050000600600110007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4002000}, 0x8804) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x670082, 0x8) write$P9_RLERROR(r6, &(0x7f0000000080)={0xb, 0x7, 0x2, {0x2, '!-'}}, 0xb) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:29 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6c00) 00:50:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2264.984959][ T4872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2265.008970][ T4877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2265.079989][ T4888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2265.111408][ T4894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2265.339580][ T5] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2265.579507][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2265.699592][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2265.710329][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.722011][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.732231][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2265.745440][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2265.754835][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.763955][ T5] usb 5-1: config 0 descriptor?? [ 2266.499555][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2266.505541][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2266.514006][ T5] usb 5-1: USB disconnect, device number 82 00:50:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x4e21, @loopback}}) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) 00:50:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:31 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7400) 00:50:31 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = gettid() mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r5, 0x2f, 0x5d, 0x7, 0xffffffff, 0x0, @private0, @ipv4={[], [], @empty}, 0x7, 0x80, 0x8, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r11}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) fcntl$setown(0xffffffffffffffff, 0x8, r1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000001010200000000000000000300000008000840000000010800084000000800100001800c000280050001000000000028001640000000000000001f0000000800007fff000000070000007f000000030001000100003ff008000840000000c20001080002400000006408000140000000000800014080000001080001400000007108000c4000000004ddf400513a66aef832213ed542d127ea055c66525e4f302e0b9e3e4227c03ad4dac5a916e13337e43b62080ba22cbef02d654a16258d10f022f2dc08defb3cc2ef431c73d09eb7788ff05115cca64c735f5ab889da22f91407207dc8dacd7dfe7a21bc00"/251], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x48080) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x1, 0x3, &(0x7f0000000200)=[{}, {}, {}], 0x0, &(0x7f0000000300)={&(0x7f0000000280)={[0x3]}, 0x8}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0xd}]}]}]}, 0x38}}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) ioctl$KDGKBSENT(r8, 0x4b48, &(0x7f0000000680)={0x9, "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"}) r9 = dup2(r0, r7) r10 = dup2(r7, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getparam(r11, &(0x7f0000000140)) 00:50:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:31 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7a00) [ 2266.971501][ T4909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.988336][ T4915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2267.018522][ T4921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.037064][ T4922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.057809][ T4928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.168373][ T4931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.229520][T21360] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2267.469508][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2267.589557][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2267.600295][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.611187][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2267.620956][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2267.633857][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2267.642908][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.651579][T21360] usb 5-1: config 0 descriptor?? [ 2268.389579][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2268.395675][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2268.404520][T21360] usb 5-1: USB disconnect, device number 83 00:50:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:33 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa301) 00:50:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) dup(r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:33 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x184) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:33 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa501) 00:50:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:33 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfc00) 00:50:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x640, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xfff, 0x33, 0x1, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000000000a004000ce1320b40008000008000400", @ANYRES32=r9, @ANYBLOB="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"], 0x24}}, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x1, 0x6, @multicast}, 0x10) ftruncate(0xffffffffffffffff, 0x0) 00:50:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2268.932193][ T4964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2268.960048][ T4969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2269.139549][T21360] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2269.389543][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2269.509590][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2269.520302][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.531899][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.542073][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2269.555437][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2269.564795][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.573764][T21360] usb 5-1: config 0 descriptor?? [ 2270.319534][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2270.325513][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2270.333798][T21360] usb 5-1: USB disconnect, device number 84 00:50:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ftruncate(0xffffffffffffffff, 0x0) 00:50:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:35 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xff00) 00:50:35 executing program 5: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) getsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) mount$fuseblk(&(0x7f0000000500)='/dev/loop0\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='fuseblk\x00', 0x150000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000,user_id=\x00'/42, @ANYRESDEC=r4, @ANYBLOB="2c67725075705f69643d5615009ca3e4563d8e4d527453b9f91e96c96d963c4a3c488294125fc8e6e17b8c710ef8f651e0dc45b52a869cc36d6b3313f62ff7201f810069a1fb6eceaa6d9e27b8adf04e0a245aea8df262cdb97f1b8129d08833ce95032c87c20ec6ee55b5950d5733765716138dc3b61c929b4f8ea823f4b0f485bae0348ad4bdf305c8e4f6891edcb4f7d7", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000800,max_read=0x0000000000000004,blksize=0x0000000000000600,blksize=0x0000000000000000,default_permissions,subj_role=--,euid>', @ANYRESDEC=r7, @ANYBLOB="3f36d3b60f7e899ddaa83944927fefa697df", @ANYRESDEC=r11, @ANYBLOB="2c6673757569643d63335300626667352d003732622d633064622d656233322d336562d3373c0b322c61707072616973652c00"]) 00:50:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:35 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0xa0001, 0x88) 00:50:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) chroot(&(0x7f0000000000)='./file0\x00') r2 = dup2(r1, r0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:35 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x34000) [ 2270.772223][ T4982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.784522][ T4986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.851678][ T5002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.875158][ T5003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.049526][ T5] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2271.289536][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2271.409613][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2271.420375][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.431280][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2271.441041][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2271.454312][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2271.463394][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.473539][ T5] usb 5-1: config 0 descriptor?? [ 2272.229557][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2272.235533][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2272.243199][ T5] usb 5-1: USB disconnect, device number 85 00:50:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x307a9000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0xc820) r9 = dup2(r6, r6) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:36 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x400300) 00:50:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000000)={0x1bf, 0x14, &(0x7f0000000200)="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"}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:37 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x940, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:37 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1000000) 00:50:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2272.677640][ T5016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.716347][ T5027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.778869][ T5036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.790652][ T5040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.959519][ T5] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2273.199521][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2273.319601][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2273.330433][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.341307][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.351083][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2273.363962][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2273.373023][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.381705][ T5] usb 5-1: config 0 descriptor?? [ 2274.109580][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2274.115590][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2274.123934][ T5] usb 5-1: USB disconnect, device number 86 00:50:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup3(r3, r2, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000000)={0xfcf0, 0x1, 0x5}) r6 = dup2(r0, r4) r7 = dup2(r4, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCCBRK(r13, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f00000000c0)=0x6) ftruncate(0xffffffffffffffff, 0x0) 00:50:38 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x12f0000) 00:50:38 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x5]}, 0x8, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x66, 0x8, 0xa, @mcast1, @local, 0x80, 0x700, 0x3, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', r2}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair(0x2c, 0xa, 0xfd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x41) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x800002, 0x11, r10, 0x0) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000140)={0x1ff, 0x200, 0x8001, 0x3f, 0x5, "3137079822499c65"}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="a2af4821d3dd7c923087225ca93ba04f6e0e6e379400f9090000002aa8994d5975afb69c0adb2d0231fc5f34a25962c88e6fc5f9faf460f333a20c680800adc495de5ffa6c58b6eea5f237687b1b2fca3323e2a58c9e2bfefaa65e38209c09cd3c73dbaa2dc1de78cbe8cb2408001c56a3870a88eff567f20c51784901010000000000003876a6f0e65b9d086a3c012e79f7baa574202def127c0c98dbac6ab5033e"], 0x24}}, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1e, r9, 0x1, 0xfc, 0x6, @remote}, 0x14) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) 00:50:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) mknod$loop(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0x7, 0x7, 0xff, 0x3, 0x2, 0x3e, 0x0, 0x39e, 0x40, 0x4d, 0x8, 0xfd43, 0x38, 0x1, 0xff, 0x9, 0x9}, [{0x4, 0xfffffff9, 0x4, 0x80000000000000, 0x8, 0x2, 0x639, 0x387e}], "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", [[], [], [], [], []]}, 0x676) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) setuid(0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x1518c2, 0x0) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r9, 0xffffffffffffffff, r11) statx(r5, &(0x7f0000000180)='./file0\x00', 0x4000, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200003fa6c983e8000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040004000000000008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="10000400000000002000060000000000"], 0x54, 0x2) r13 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2274.579131][ T5054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.603329][ T5061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.859530][T21360] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2275.099545][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2275.229591][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2275.240303][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.251183][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2275.261173][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2275.274054][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2275.283099][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.291832][T21360] usb 5-1: config 0 descriptor?? [ 2276.019644][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2276.025639][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2276.033984][T21360] usb 5-1: USB disconnect, device number 87 00:50:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:40 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2000000) 00:50:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) dup2(r1, r2) r6 = dup2(r0, 0xffffffffffffffff) r7 = dup2(0xffffffffffffffff, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r5, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) fallocate(r0, 0x20, 0x0, 0x38e2) creat(&(0x7f00000001c0)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x5, 0x20}]}) 00:50:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff}) dup(r7) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r8, 0x4, 0x8, 0x3}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r15}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4040805) 00:50:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) dup2(r1, r2) r6 = dup2(r0, 0xffffffffffffffff) r7 = dup2(0xffffffffffffffff, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x402042, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) dup2(r1, r2) r6 = dup2(r0, 0xffffffffffffffff) r7 = dup2(0xffffffffffffffff, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2276.523609][ T5101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2276.546914][ T5110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2276.596974][ T22] audit: type=1326 audit(1597452640.874:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5088 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 [ 2276.769524][ T5] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2277.019513][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2277.139595][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2277.150457][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.161370][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.171213][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2277.184124][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2277.193206][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.202024][ T5] usb 5-1: config 0 descriptor?? [ 2277.280814][ T22] audit: type=1326 audit(1597452641.564:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5088 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 [ 2277.949601][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2277.955588][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2277.963296][ T5] usb 5-1: USB disconnect, device number 88 00:50:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:42 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x3000000) 00:50:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = signalfd(r3, &(0x7f0000000240)={[0x35]}, 0x8) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000280)={0x2, 0x9, 0xfffffbff, 0x75, 0x0, 0x101}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r6 = dup2(r1, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044895}, 0x10) 00:50:42 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0xe1) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) clone(0x22000, &(0x7f0000000040)="591f0c03627d5a20ffa5cb3a8b66b02daf777e0f47ce380f5dedb5e64d8273e9e601b2544c904154bd174e985ca11caca959ac326f4fa642cbc6fe1ac5ad28d16038f124bee5de0081a705617d57fbed4e6b0230800390024c34242f12e908b3adce7091206e749b03786f8187ff934b3cab71acd16757642a138629563f7e", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="c8902e62a2c33c4014099e4299d89ce37090f4a04ecbfcc939407dfee9176adb5b04b86217e47982d475bcde2554348a80610b0e5fa8718270f6923b3a48f08048d7f193eda9cfc4039010ef58545a1d379d70b6810deceba673b0843a7b6533b6be71fc6ce5243a529b922aa2b9792816384f585294808bc43081a0189e417957b203d894532b04b082f5a3d765159d46816af772c7db3293e5c33da348645e5eeb34ac916794d405736de692764e4a0e97c3cff3538b21848b168fc3065f4d482dc900c80864cc41f3238d35830363393f183497a3791d896be49a93da12eed268753c44d97d063b1342eaea6cad6cc214") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') write$input_event(r3, &(0x7f0000000240)={{0x0, 0x2710}, 0x1, 0x1f, 0x47}, 0x18) 00:50:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x90, 0x2000000020e, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cgroup_freezer_state(r5, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r7 = dup2(r6, r2) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0xffffffff80000000, 0x8000) r9 = dup2(r0, r8) r10 = dup2(r8, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r13, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2278.410846][ T5140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.449401][ T5154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.659527][ T5] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2278.899540][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2279.019640][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2279.030397][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.042300][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2279.054179][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2279.067475][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2279.076982][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.085964][ T5] usb 5-1: config 0 descriptor?? [ 2279.829560][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2279.835553][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2279.843876][ T5] usb 5-1: USB disconnect, device number 89 00:50:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:44 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4000000) 00:50:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r7 = dup2(r6, r5) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x5000000) 00:50:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2280.307519][ T5182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.324212][ T5187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.371655][ T5196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.400405][ T5199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.579572][T21360] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2280.819521][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2280.939602][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2280.950382][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.961271][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.971012][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2280.983901][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2280.992944][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.001778][T21360] usb 5-1: config 0 descriptor?? [ 2281.739590][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2281.745579][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2281.753782][T21360] usb 5-1: USB disconnect, device number 90 00:50:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:46 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6000000) 00:50:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:46 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x5b) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000080)='./bus\x00', 0x86) ftruncate(r0, 0x9) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000000)={0x3, 0x3, 0x1, 0x81, 0x101, 0x7}) 00:50:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x1052c2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) ftruncate(0xffffffffffffffff, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r7, 0x7002) ptrace$cont(0x7, r6, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x400, &(0x7f0000000000)) 00:50:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:46 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7000000) [ 2282.213088][ T5217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.252996][ T5225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) fremovexattr(r7, &(0x7f0000000000)=@random={'btrfs.', '@$:\x00'}) ftruncate(0xffffffffffffffff, 0x0) [ 2282.313755][ T5237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.327139][ T5240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.469526][T21360] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2282.709515][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2282.829602][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2282.846414][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2282.871003][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2282.891117][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2282.919055][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2282.939000][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.959192][T21360] usb 5-1: config 0 descriptor?? [ 2283.709615][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2283.715595][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2283.739629][T21360] usb 5-1: USB disconnect, device number 91 00:50:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:48 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x8000000) 00:50:48 executing program 5: chroot(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r13, 0x0, r12) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000000)="f7bf54a3f9638d4e", 0x8}, {&(0x7f0000000200)="e135e44933900e21ed44bd36a1d9216b45621b04c69609b2604da2dfe7a0b5a1b697a24a57d98dad8dac6e6f5b243fcc174e3a4904b43ede559e6de39d2831858ccf5c0f00ebaf532bfae62c8201239c8220bdae14b7b900ab29eb02a5c9796955ae0eaf56ce6d6348ed", 0x6a}], 0x2}, {&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="defa54cce8aa061587e734a123c1c0854dbead8fc8a0435eeaa34e6be5cd814a2fcb0bc9acb483c851192c64378b9b029a384b0f05f72c5f93173a6b5766fe10b83c176ef5f87bd82cb1130de6ed8aac0af1e5a96a927d8038669484aba592df941ec9a8f5bca3f699fb426a56336c2dc333619141b428550409879c409cb43c8480e571253e85dbc94804", 0x8b}, {&(0x7f00000003c0)="507bbd32563ae829743db56353b9002bf51cf62e7360b737f0d9e3e86fdbb04c578543fb366aa1da4017eb159ced9e0138bc9d4c434cd3de87c333d65263d9a57afc240edb81fb96159a54ce9e1838657f21e1f07c14b5d3774bc6582f950ec3378839da083f9ffdd456a548525a345940a8919d0c29261e1a3a32461e2154360cc7ffdee35b4bef1a4149d9385c51752507f4f8a8637f3f674689b02a19e04a7f581289265093b7c31a62d412ae", 0xae}], 0x2, 0x0, 0x0, 0x40001}, {&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)="72116ab17ccbde9472229f5ac6e86abcdd8fbab01f3d8d94813eb255", 0x1c}, {&(0x7f0000000580)="c27cda6742fb1ae30ba247a86663c2ed5c0179a3be487db789a3c4f925a302e42f68d24f1fc412280ec61b807e02a186361915e9c7681f16f590c84bc268abf6", 0x40}, {&(0x7f00000005c0)="54d540340018961cd81768f28bfa117628ceebcd2bc5cf06fa00bde6e5fb39063df5dacc2b95a607d208084a33284563317a5fcde5ddc0067d23b6c2ba12e75a17ee7b115d61e1f55b66166fda90a9f6369f1fae7ed600e7e0c7b003b6dc", 0x5e}], 0x3, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r4, 0xffffffffffffffff]}}], 0xd0, 0x40000}, {&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="7ab346abb7dc9efbd55196909866d6cfdceec9e4f18af42a1b032e686b6d451d7f992cf509bf9eb4c1eb8a9dc79afb761bdb0f38a965d638c139e66a3c42f36c2859c845bc335394b075e6c7e299ff516b9d52decb784c8e42e645e0de3f9baee706b6ee57a28497084125770968fc97c435d0", 0x73}], 0x1, &(0x7f00000010c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0, 0x4004000}, {&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)="688b20143957bee7e1bef4fa69aead3aae40387e974de1a7e691a2cf29c13679a5f9c97624b368007a1ac10baed1f999f50cb80a", 0x34}, {&(0x7f0000001280)="8043ced462ea4de1fd506333ef7cc0f6eb07286663a62571d0019df9cb09379c8b23017f7309ac8865658a9b456349648fa60cdaae97b9937246e927040c3d6822e1c25358f82b2b451720dae152d5525840619511761a07f1e61ccd9f76588c87685ba2da71d7b485d6b5a9a03b5cbc3685e858cb66dbee010a19c7aaccf5dd17fa8ad04ebb29a46b807efaeb2789b63caaeb6881a61ee33d3dc315bcb0", 0x9e}], 0x2, &(0x7f0000001840)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110, 0x4040000}, {&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001a00)="1659ef5cb24893aac85994c52f4000d3251e57abf391ac34c0d6fa8be60bab2aa67891913951c88da5995595b5e20ee3d95553fa77d76fbe66df4f12ffd99530eff80f", 0x43}, {&(0x7f0000001a80)="3284b3b0df3394587fc3f1efb69acde68593387a81e6a88966e2f5c0ec68ebc284db7eef09f8c9fb83e8d23c1948", 0x2e}], 0x2, &(0x7f0000001b40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8, r11, r0, r13]}}], 0x38, 0x20008040}], 0x6, 0x20000800) 00:50:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:48 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x9000000) [ 2284.172496][ T5252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2284.200378][ T5260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2284.259172][ T5273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2284.287602][ T5277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2284.459567][T21360] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2284.709536][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2284.829608][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2284.840375][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.851259][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.861037][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2284.873952][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2284.883013][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.891733][T21360] usb 5-1: config 0 descriptor?? [ 2285.619569][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2285.625633][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2285.633923][T21360] usb 5-1: USB disconnect, device number 92 00:50:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:50 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa000000) 00:50:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:50 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4000, 0x40) 00:50:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:50:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2286.097856][ T5289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:50 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xb000000) [ 2286.138418][ T5304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2286.171838][ T5310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2286.196913][ T5313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2286.359562][ T5] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2286.599568][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2286.719634][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2286.730399][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.741295][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.751079][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2286.764030][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2286.773091][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.781977][ T5] usb 5-1: config 0 descriptor?? [ 2287.519572][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2287.525553][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2287.533817][ T5] usb 5-1: USB disconnect, device number 93 00:50:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xc000000) 00:50:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2287.980809][ T5325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.014214][ T5334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:52 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xd000000) 00:50:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2288.070916][ T5345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.083620][ T5347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.269533][T21360] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2288.509561][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2288.639616][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2288.650351][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.661491][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.671385][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2288.684288][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2288.693373][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.702257][T21360] usb 5-1: config 0 descriptor?? [ 2289.239602][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2289.245604][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2289.253835][T21360] usb 5-1: USB disconnect, device number 94 00:50:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:53 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:53 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:53 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xe000000) 00:50:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:53 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x2, 0x0, &(0x7f00000000c0), 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="736d61636b66736465663d232a2c001e20df0ce744ec0d4cad96f72ea080989b2e1e8b1bfcdc73bac1c4a77d5c91f8728c1db13c3e7d8a895da4bee11fe675cab075e7823d3447e6c5cece8065ec9eaef99bcdfe9678cd590086760ebbb135a9226cc2c79ce85d2aefb0aa2a2f5d2deda1bfe6a725458d1c31"]) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0xa4) 00:50:53 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:53 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:54 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:54 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xf000000) 00:50:54 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2289.695100][ T5364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2289.718938][ T5371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2289.765417][ T5379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2289.777900][ T5377] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2289.795031][ T5377] CPU: 0 PID: 5377 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2289.805091][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.815137][ T5377] Call Trace: [ 2289.818426][ T5377] dump_stack+0x14a/0x1ce [ 2289.822748][ T5377] ? devkmsg_release+0x11c/0x11c [ 2289.827668][ T5377] ? show_regs_print_info+0x12/0x12 [ 2289.832848][ T5377] warn_alloc+0x236/0x380 [ 2289.837159][ T5377] ? zone_watermark_ok_safe+0x420/0x420 [ 2289.842687][ T5377] __alloc_pages_slowpath+0x1d6b/0x1e50 [ 2289.848222][ T5377] ? get_page_from_freelist+0x7c0/0x7c0 [ 2289.853747][ T5377] ? __zone_watermark_ok+0x91/0x280 [ 2289.858928][ T5377] __alloc_pages_nodemask+0x5cb/0x7c0 [ 2289.864288][ T5377] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2289.869903][ T5377] ? ion_page_pool_alloc+0x320/0x490 [ 2289.875165][ T5377] ion_system_heap_allocate+0x2b4/0xbf0 [ 2289.880715][ T5377] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2289.886676][ T5377] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2289.892116][ T5377] ion_buffer_alloc+0x20f/0x630 [ 2289.896954][ T5377] ion_dmabuf_alloc+0xcb/0x230 [ 2289.901700][ T5377] ? track_buffer_created+0x1c0/0x1c0 [ 2289.907055][ T5377] ? check_stack_object+0x5a/0x90 [ 2289.912062][ T5377] ion_ioctl+0x2e8/0x9c0 [ 2289.916293][ T5377] ? debug_shrink_set+0x1b0/0x1b0 [ 2289.921320][ T5377] ? debug_shrink_set+0x1b0/0x1b0 [ 2289.926331][ T5377] do_vfs_ioctl+0x770/0x1750 [ 2289.930905][ T5377] ? selinux_file_ioctl+0x73b/0x990 [ 2289.936085][ T5377] ? ioctl_preallocate+0x250/0x250 [ 2289.941186][ T5377] ? _copy_to_user+0x8e/0xb0 [ 2289.945761][ T5377] ? __fget+0x37c/0x3c0 [ 2289.949993][ T5377] ? get_timespec64+0x1d0/0x1d0 [ 2289.954826][ T5377] ? fget_many+0x20/0x20 [ 2289.959049][ T5377] ? __x64_sys_clock_gettime+0x20d/0x260 [ 2289.964691][ T5377] ? security_file_ioctl+0xad/0xc0 [ 2289.969781][ T5377] __x64_sys_ioctl+0xd4/0x110 [ 2289.974439][ T5377] do_syscall_64+0xcb/0x150 [ 2289.978923][ T5377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2289.984796][ T5377] RIP: 0033:0x45d239 [ 2289.988667][ T5377] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2290.008251][ T5377] RSP: 002b:00007f9e484fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2290.016649][ T5377] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2290.024615][ T5377] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2290.032584][ T5377] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2290.040547][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2290.048499][ T5377] R13: 00007ffe645b67ff R14: 00007f9e484fe9c0 R15: 000000000118cf4c [ 2290.072209][ T5381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2290.102602][ T5377] Mem-Info: [ 2290.106043][ T5377] active_anon:1365077 inactive_anon:5270 isolated_anon:0 [ 2290.106043][ T5377] active_file:5093 inactive_file:7963 isolated_file:24 [ 2290.106043][ T5377] unevictable:0 dirty:1290 writeback:1025 unstable:0 [ 2290.106043][ T5377] slab_reclaimable:19844 slab_unreclaimable:71549 [ 2290.106043][ T5377] mapped:59217 shmem:5339 pagetables:49371 bounce:0 [ 2290.106043][ T5377] free:21563 free_pcp:423 free_cma:0 [ 2290.149554][ T5377] Node 0 active_anon:5460308kB inactive_anon:21080kB active_file:20372kB inactive_file:22352kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:236868kB dirty:3760kB writeback:0kB shmem:21356kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2290.175607][ T5377] DMA free:15904kB min:24kB low:36kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.202671][ T5377] lowmem_reserve[]: 0 2912 6416 6416 [ 2290.208350][ T5377] DMA32 free:53996kB min:20548kB low:23528kB high:26508kB active_anon:2797352kB inactive_anon:2204kB active_file:7992kB inactive_file:10216kB unevictable:0kB writepending:6428kB present:3129332kB managed:2983768kB mlocked:0kB kernel_stack:4288kB pagetables:3656kB bounce:0kB free_pcp:1844kB local_pcp:376kB free_cma:0kB [ 2290.239972][ T5377] lowmem_reserve[]: 0 0 3504 3504 [ 2290.245173][ T5377] Normal free:20172kB min:24744kB low:28332kB high:31920kB active_anon:2662956kB inactive_anon:18876kB active_file:12380kB inactive_file:16892kB unevictable:0kB writepending:116kB present:4718592kB managed:3588928kB mlocked:0kB kernel_stack:57856kB pagetables:193680kB bounce:0kB free_pcp:1572kB local_pcp:744kB free_cma:0kB [ 2290.249563][ T5] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2290.278391][ T5377] lowmem_reserve[]: 0 0 0 0 [ 2290.288262][ T5377] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15904kB [ 2290.301722][ T5377] DMA32: 1564*4kB (UMEH) 1681*8kB (UMEH) 1279*16kB (UMEH) 592*32kB (UMEH) 16*64kB (UH) 8*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61928kB [ 2290.317553][ T5377] Normal: 574*4kB (EH) 723*8kB (UEH) 526*16kB (UEH) 16*32kB (UEH) 7*64kB (H) 6*128kB (H) 5*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 20016kB [ 2290.332979][ T5377] 11095 total pagecache pages [ 2290.337641][ T5377] 0 pages in swap cache [ 2290.341803][ T5377] Swap cache stats: add 0, delete 0, find 0/0 [ 2290.347845][ T5377] Free swap = 0kB [ 2290.351791][ T5377] Total swap = 0kB [ 2290.355495][ T5377] 1965979 pages RAM [ 2290.359271][ T5377] 0 pages HighMem/MovableOnly [ 2290.363981][ T5377] 318829 pages reserved [ 2290.368125][ T5377] 0 pages cma reserved [ 2290.529572][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2290.649638][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2290.660348][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.671866][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.681973][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2290.695250][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2290.704661][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.713546][ T5] usb 5-1: config 0 descriptor?? [ 2291.249606][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2291.255545][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2291.263971][ T5] usb 5-1: USB disconnect, device number 95 00:50:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:55 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x10000000) 00:50:55 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:56 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0x100) ioctl$RTC_VL_CLR(r1, 0x7014) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'batadv_slave_0\x00', 0x2000}) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept4(r6, &(0x7f0000000080)=@l2, &(0x7f0000000100)=0x80, 0x80000) 00:50:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2291.727530][ T5399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2291.752201][ T5412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2291.969560][T21360] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2292.209597][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2292.329649][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2292.340383][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.352022][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.362202][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2292.375479][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2292.384922][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.393886][T21360] usb 5-1: config 0 descriptor?? [ 2292.919608][T21360] usbhid 5-1:0.0: can't add hid device: -71 [ 2292.925555][T21360] usbhid: probe of 5-1:0.0 failed with error -71 [ 2292.933840][T21360] usb 5-1: USB disconnect, device number 96 00:50:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:57 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x11000000) 00:50:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='ip_vti0\x00', 0xa00000000, 0x5, 0x5}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @remote}, 0x0, 0x1, 0x96ed, 0x300, 0x8000, 0x4900000, r5}) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2293.379086][ T5431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.398897][ T5436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:57 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x12000000) [ 2293.425098][ T5443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.464792][ T5450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.490699][ T5451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.560766][ T5432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.629641][ T5] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2293.869567][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2293.989632][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2294.000365][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.011988][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2294.022171][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2294.035514][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2294.044949][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.053915][ T5] usb 5-1: config 0 descriptor?? [ 2294.534528][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0018/input/input44 [ 2294.547563][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0018/input/input45 [ 2294.565708][ T5] kye 0003:0458:5013.0018: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2294.731271][ T5] usb 5-1: USB disconnect, device number 97 00:50:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x20000000) 00:50:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x800}, {0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x6, [0x2, 0x17f, 0x8001, 0x1f, 0x1, 0x3, 0x6, 0x5]}, 0x5c) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readahead(r1, 0x4, 0x6) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:50:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:50:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x25000000) 00:50:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2295.274203][ T5480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.290541][ T5488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:50:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x3f000000) [ 2295.332172][ T5494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.342940][ T5498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.408106][ T5505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.422745][ T5506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:50:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2295.549561][ T5] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2295.789550][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2295.909643][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2295.920356][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2295.931250][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2295.941045][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2295.953951][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2295.963004][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.971740][ T5] usb 5-1: config 0 descriptor?? [ 2296.444643][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0019/input/input46 [ 2296.457687][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0019/input/input47 [ 2296.476229][ T5] kye 0003:0458:5013.0019: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2296.641443][T21360] usb 5-1: USB disconnect, device number 98 00:51:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:01 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x40000000) 00:51:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='threaded\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:51:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) [ 2297.168407][ T5534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2297.205554][ T5543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2297.439570][T21360] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2297.689591][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2297.809661][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2297.820429][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.831323][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2297.841085][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2297.853988][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2297.863048][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.871734][T21360] usb 5-1: config 0 descriptor?? [ 2298.354592][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001A/input/input48 [ 2298.367590][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001A/input/input49 [ 2298.395283][T21360] kye 0003:0458:5013.001A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2298.551177][T21360] usb 5-1: USB disconnect, device number 99 00:51:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:51:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:03 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x48000000) 00:51:03 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus', [{0x20, '+}'}, {0x20, '[.^\x10x^&)\xc6@-\\+\\x,/.!-'}, {0x20, 'threaded\x00'}, {0x20, 'threaded\x00'}, {0x20, 'threaded\x00'}], 0xa, "9ba61440dfbcd2d56ab13938a2cda94587c321a6d09028c05d5c7956f94372f0a9c98a309310fd20d22e1bfd3b4c19ff8a961e6e94471e568b91e7eea64e0c6659615c2905f371e8a51c97a73918247ddf5bb2388d20d7d8acf2832b2f0b8306e822caf327eeb1e1"}, 0xa7) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:51:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2299.079410][ T5580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:51:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2299.136966][ T5597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2299.339566][ T5] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2299.579625][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2299.699668][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2299.710406][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2299.723084][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2299.733440][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2299.746829][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2299.756346][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.766084][ T5] usb 5-1: config 0 descriptor?? [ 2300.254488][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001B/input/input50 [ 2300.267440][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001B/input/input51 [ 2300.289165][ T5] kye 0003:0458:5013.001B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2300.451121][ T5] usb 5-1: USB disconnect, device number 100 00:51:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:05 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4c000000) 00:51:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:51:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x0, 0x15, 0x4, 0xfff, 0x8c, 0x6a62, &(0x7f0000000580)="05e09427b9ef6c7667db65c85786b0b67bb21494d55b8b1fb75faa2f03a7a5c30b3696880c1bb89ae55631cfcc0f0a6f7776bd412adcf5112f5bf2b2b6b294cfb6f93aa88aeb5babf3bb9ef24d1865acd22109d741b3dfe83e8ba6e3e420371c88d48c410378ffdcb36a0300d5d649ddba8c1eb217e26c980ff40280f39ecc319a4505ff0b05b986d4bf624a"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x800) r5 = fcntl$dupfd(r4, 0x406, r0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xd6, 0xd9, &(0x7f0000000240)="1b18ce3cf6a498ff274d50ef9c8b7ae10dd8954a7f5aff4632ca9c4a97e97460467dda7074eef71cd5f6084cf5684eaa66f3ec0d36897ac024e176ff29590725bcf7766a5040bc5736db8c4ab19f6ea46023408715d482710aa40854be4105955fea1ac1cd127bc3e510c25560fdbbd8c82874b444cea5ebabc93d87d113e3ba503fe2bfb86896952198a6849f3dfddf7821e23f51e860c60be74edf212d4a9d0855a3b8fb633c8643c3d864bf8f7ea3d7e90cf914a25061480f7c02d9f219decf8a8567a74633b3bba293ec88802f3136274ae21139", &(0x7f0000000340)=""/217, 0xf2, 0x0, 0x13, 0xac, &(0x7f0000000440)="7218f5d3afd79196a7acd5647ad8c37f2eb54a", &(0x7f0000000480)="91cc13101dd479a3a489e8afb7ef1260c806d806495f814724892f567efef3124cb5d5638c913140f373edd69a627a5dd87c7de8b48c1747a196e7b15188a561b969163d177af6dce7fa1e55f2d7f45e1b74d0e582a90caca0ff806ab3c0efbe66aa910b2abd263b2f6452b351fd4a1785e3eb4c86bd743b89dac76daa8212d2e01a8a21431eb7080ed0c7e09010fef25f3347dffe98035f7282b8919315b2780283bb9320eb893c3433cd1e"}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$security_ima(r5, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "b1412c1541df6d40731fb8f336f460b8"}, 0x11, 0x0) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x70, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 00:51:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:51:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:05 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x60000000) 00:51:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) [ 2300.977995][ T5625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.010008][ T5636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.067914][ T5647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.083211][ T5652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.249615][T21360] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2301.489603][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2301.609652][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2301.620466][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2301.632154][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2301.642255][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2301.655565][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2301.665013][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.674033][T21360] usb 5-1: config 0 descriptor?? [ 2302.154466][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001C/input/input52 [ 2302.167240][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001C/input/input53 [ 2302.190131][T21360] kye 0003:0458:5013.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2302.351493][ T5] usb 5-1: USB disconnect, device number 101 00:51:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:51:07 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x68000000) 00:51:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:07 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6c000000) [ 2302.888984][ T5682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.918885][ T5691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.971885][ T5702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.982266][ T5703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.169588][ T5] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2303.409600][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2303.529676][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2303.540409][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.551277][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.561038][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2303.573947][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2303.582999][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.591867][ T5] usb 5-1: config 0 descriptor?? [ 2304.064619][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001D/input/input54 [ 2304.077703][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001D/input/input55 [ 2304.099354][ T5] kye 0003:0458:5013.001D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2304.261159][ T5] usb 5-1: USB disconnect, device number 102 00:51:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x74000000) 00:51:09 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0x7) 00:51:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) dup2(r1, r2) r3 = dup2(r0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2304.793512][ T5729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2304.838528][ T5746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2305.059604][T21360] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2305.299603][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2305.419672][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2305.430495][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.442079][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2305.452232][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2305.465474][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2305.474899][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.483842][T21360] usb 5-1: config 0 descriptor?? [ 2305.964410][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001E/input/input56 [ 2305.977266][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001E/input/input57 [ 2305.999423][T21360] kye 0003:0458:5013.001E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2306.161133][ T5] usb 5-1: USB disconnect, device number 103 00:51:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:10 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:10 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7a000000) 00:51:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:11 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:11 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x1, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2306.699719][ T5776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2306.732012][ T5787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2306.969575][ T5] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2307.229597][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2307.349674][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2307.360413][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.371311][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2307.381099][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2307.394057][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2307.403110][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.411793][ T5] usb 5-1: config 0 descriptor?? [ 2307.894423][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001F/input/input58 [ 2307.907376][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001F/input/input59 [ 2307.929672][ T5] kye 0003:0458:5013.001F: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2308.091109][ T5] usb 5-1: USB disconnect, device number 104 00:51:12 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) renameat2(r1, &(0x7f0000000000)='./bus\x00', r2, &(0x7f0000000040)='./bus\x00', 0x6) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:12 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x9effffff) 00:51:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x0, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:12 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa3010000) 00:51:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2308.889630][T21360] usb 5-1: new high-speed USB device number 105 using dummy_hcd 00:51:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x0, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:13 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa5010000) [ 2309.149608][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2309.269703][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2309.280416][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2309.291303][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2309.301083][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2309.314147][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2309.323198][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.331918][T21360] usb 5-1: config 0 descriptor?? [ 2309.814470][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0020/input/input60 [ 2309.830881][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0020/input/input61 [ 2309.847062][T21360] kye 0003:0458:5013.0020: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2310.011197][ T5] usb 5-1: USB disconnect, device number 105 00:51:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000240)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:14 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x10010, r3, 0x8000000) 00:51:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x0, 0x1, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xe0ffffff) 00:51:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xeaffffff) 00:51:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) dup2(r7, r8) 00:51:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2310.829708][ T5] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2311.069593][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2311.189698][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2311.200586][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2311.212781][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.222930][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2311.236293][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2311.245962][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.255006][ T5] usb 5-1: config 0 descriptor?? [ 2311.744450][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0021/input/input62 [ 2311.757465][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0021/input/input63 [ 2311.779616][ T5] kye 0003:0458:5013.0021: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2311.941946][ T5] usb 5-1: USB disconnect, device number 106 00:51:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000240)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:16 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0x8c) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) prctl$PR_SET_SECUREBITS(0x1c, 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) sendmsg$inet6(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0xa, 0x4e20, 0x10000, @mcast1, 0x80000000}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000100)="1309a706f30aa364823f2e104b08c78a4aca8597d0b2be98328e371c28483dd9f59a00d7d7ba1bf14a4fa834ad0016d4013af37441729b62fff928d35bc385524f47cb671c7a0c31b1b25d8b70d359", 0x4f}, {&(0x7f0000000200)="97efda9abe6a98e538f8ad8beaa5e573e9d631191904b3b238a976af62d5601429a28bdd82d23954a60057e48ff795a4a58348738fc050a9f1f5501f20080ac0b80a7ff2fff03a187054e03d", 0x4c}, {&(0x7f0000000280)="5b4ad47acb8723195cbf018a17daa48b4aaa7f42436e4d47030a61dc287b4e0afe86fe1b0b695d0d39cd1b63dde9e699352ce32d1f59a1c53bb4d001b59866284afd8a2f3a2a1c21def4fe9266882fcff666f0214223013ce17109374d7db644402371ff3dd5c05028f518caced4826b8a9dc41dbf914bc08bf204a6c71f841bd24b32febd26ad86dbbdc5156ea548bb967992dbbd12209f920b1750d79af60e079779a647d939ddfc85dad22a3a8277bd16e7ff055655076467ec952e5a55c2d0e2b45bc270a2544f686b351de4cf1f2a2209", 0xd3}, {&(0x7f0000000380)="97eb682502aba90fbc662b4bad3202a4d652d19f96dc6ebe866a179012c2d48a0da8ee380272171728a920af3cdceae686e77176d5e20b1a955d2552b4a2d83da3d162d2287d843405282fab2a19f960f85284b696888db6e0df0f6657d8356b128a1e95346bfcd1d55f8dd227b79568060d90c60c2964c1f940bd4254b8be125c356d1308486957ee25e0ea5fb433bb4f5a91da42f5f83cc3af5ab4da9553651df2fccd96d2441ee4793b07781293949fdd0cf706b18a5c5703d0c9f8a7658f59b59c866aef00cf8f834cf07351e6985cf533534e20b1d00806c43586", 0xdd}, {&(0x7f0000000480)="b84338d37e3d387a4d8c1fc40af2a269d9943675b3f45db8a51f4767b267195aa3318b6b90b373f6d96a1f02fac3707b28e7949dd303c27d11f6599f8d1fcd65a3cf7ba4fb5961c00ecd367eac8dce063bc00579a8d6cbf5d874400f89d79a557e6b1f6a2461ccb0ff0946fb84cebbddf156090c49d8df5a941a51d237089bcb9a4cf9850d7a18854c848493aeca68f6bbbc7c14e5538c05dc96179752", 0x9d}, {&(0x7f0000000540)="a31e7ee5a749989994548b91bd1f3fe22bb9f56f9e1f230ee339cf5f2da22280035364f2b76a714647c13559cfe6ffb07356c0183074bb2ab819a61e35976b3559db91ddf9bb4af185a2015bf832d281b037a99a18d0772f9f86ea3d11b575e7d53e663d8a9b9e671448293534c45618ede139519d4d11bae5d729e4e2c983ee2964873b1b7a", 0x86}, {&(0x7f0000000600)="776a7a65708dc6e17eee5181fe58bcb270e4b2ddb7d6911abaf2abeeab9db88c188dd246d4f90742a05455772593e438cce41d7eb2e4240da028f10fd73020b8a857f56b4c483ca9ced38aa041459cd02a2b50500eab53c95a7c0bb8f2e79bc0c065fe0439ac711e6bec8f617b399ef0631597558354769ea9f47e86fd6bb4affc4554743cff3d6d149554c7b2632df7baa74033965de2b38e8b1eec2253283612e5f97826031ad38809fb7b4421512556288c310551123b92ebf4842d45908a45eccdd6ca007142eaa19e065d7c443143e55513", 0xd4}], 0x7, &(0x7f0000000180)}, 0x0) 00:51:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:16 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xefffffff) 00:51:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) 00:51:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:16 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:16 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xf0ffffff) 00:51:16 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2312.739613][T21360] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2312.979622][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2313.099668][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2313.110551][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2313.122278][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2313.132466][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2313.145732][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2313.156374][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.166232][T21360] usb 5-1: config 0 descriptor?? [ 2313.654697][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0022/input/input64 [ 2313.667811][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0022/input/input65 [ 2313.696605][T21360] kye 0003:0458:5013.0022: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2313.851752][T21360] usb 5-1: USB disconnect, device number 107 00:51:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000240)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:18 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:18 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfc000000) 00:51:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:18 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1591fade95ae6dd92462caf3ac7bf847ec42135be66a0b7a24d11c91ef4047ce775f9bdefdcfd9014dd31ee8225ea151690a3fe59be8b42b92beb4dba1e2e3dc7b0b1593353652e4c5455530aecaea9d0f99237a446ddeff2fb2c3c1489133893d91aaf2c815da930924c6d191e43c339703c45f44bfba8a09f298fe74f5d79c209db6669d84d0f0ebf97ccfae0cc587106e7370dfa66b637210146009b90e0216dfb7ecbe1b85e2f8b55ae44323", 0xae}, {&(0x7f00000000c0)="2f7e186818189ea54f67fad0bb3dfda6d0399591dbb890437f6bb23e19e280911aa3f1dea0727879869be766ffb9b10a58a67a30b09207dddf0792f9dbdab854f4db0d077b4efb3d08d971", 0x4b}], 0x2, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x14a0}, 0x4) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:18 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfe80ffff) 00:51:18 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:18 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2314.649630][ T5] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2314.889628][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2315.009709][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2315.020414][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2315.031990][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2315.042172][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2315.055450][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2315.064910][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.074399][ T5] usb 5-1: config 0 descriptor?? [ 2315.554581][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0023/input/input66 [ 2315.567428][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0023/input/input67 [ 2315.589858][ T5] kye 0003:0458:5013.0023: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2315.751169][ T5] usb 5-1: USB disconnect, device number 108 00:51:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf1"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:20 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfec0ffff) 00:51:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:20 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfeffffff) 00:51:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2316.549624][ T5] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2316.789633][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2316.909709][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2316.920426][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.932025][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.942242][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2316.955578][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2316.965064][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.974056][ T5] usb 5-1: config 0 descriptor?? [ 2317.454289][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0024/input/input68 [ 2317.467216][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0024/input/input69 [ 2317.489238][ T5] kye 0003:0458:5013.0024: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2317.651205][T21360] usb 5-1: USB disconnect, device number 109 00:51:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf1"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:22 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup2(r0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xff000000) 00:51:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="94020000", @ANYRES16=r2, @ANYBLOB="5b0800000000000000000e00000280000e"], 0x294}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}]}, 0x20}}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$int_out(r3, 0x5462, &(0x7f0000000000)) creat(&(0x7f00000001c0)='./bus\x00', 0x18a) 00:51:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:22 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:22 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffff0000) 00:51:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:22 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2318.234219][ T6105] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2318.368619][ T6115] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2318.449662][T21360] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2318.689623][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2318.809694][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2318.820517][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.832146][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2318.842661][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2318.856110][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2318.865564][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.874888][T21360] usb 5-1: config 0 descriptor?? [ 2319.364429][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0025/input/input70 [ 2319.377486][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0025/input/input71 [ 2319.399300][T21360] kye 0003:0458:5013.0025: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2319.561184][T21360] usb 5-1: USB disconnect, device number 110 00:51:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf1"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:24 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffff80fe) 00:51:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:24 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) fallocate(r2, 0x100000010, 0x0, 0x8001) lseek(r4, 0x0, 0x3) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xfffffffffffffe69, 0x464, 0x100, 0x70bd28, 0x25dfdbff, "1ea1806c21227ffe400eaeca469f0866c013d7cd722dc04fc55b5e8cec1d7553710bacf08b4fd2e0ed3955645c59ffeb2ce5da21018c9c82b90ed918e12909e1cf1325b98ceed9f3429382c03d48aa177c8207b8d060133afa3ad17db3368ac9c9b441006eb7ac67b9e3590d549c8c5e61f7bf0665d1aa11542a2aecbdf15945a56ec3a513d8e4b9f90d27522e3c2b758604dfed0a7eff51692bef88c7f2eb6fcba9f981e004f276deb23071a6", [""]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44800) 00:51:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:24 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:24 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffc0fe) 00:51:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:24 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2320.359620][ T5] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2320.599623][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2320.719724][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2320.730653][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.741546][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.751633][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2320.764643][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2320.774088][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.785055][ T5] usb 5-1: config 0 descriptor?? [ 2321.284395][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0026/input/input72 [ 2321.298587][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0026/input/input73 [ 2321.321285][ T5] kye 0003:0458:5013.0026: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2321.481123][ T5] usb 5-1: USB disconnect, device number 111 00:51:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:26 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffff7f) 00:51:26 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:26 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:26 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:26 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffff9e) 00:51:26 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:26 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2322.105261][ T6211] warn_alloc: 2 callbacks suppressed [ 2322.105277][ T6211] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2322.182982][ T6211] CPU: 0 PID: 6211 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2322.197772][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.207849][ T6211] Call Trace: [ 2322.211144][ T6211] dump_stack+0x14a/0x1ce [ 2322.215465][ T6211] ? devkmsg_release+0x11c/0x11c [ 2322.220570][ T6211] ? show_regs_print_info+0x12/0x12 [ 2322.225875][ T6211] warn_alloc+0x236/0x380 [ 2322.230235][ T6211] ? zone_watermark_ok_safe+0x420/0x420 [ 2322.235794][ T6211] __alloc_pages_slowpath+0x1d6b/0x1e50 [ 2322.241347][ T6211] ? get_page_from_freelist+0x7c0/0x7c0 [ 2322.246894][ T6211] ? __zone_watermark_ok+0x91/0x280 [ 2322.256026][ T6211] __alloc_pages_nodemask+0x5cb/0x7c0 [ 2322.261527][ T6211] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2322.267051][ T6211] ? ion_page_pool_alloc+0x320/0x490 [ 2322.272599][ T6211] ion_system_heap_allocate+0x2b4/0xbf0 [ 2322.278237][ T6211] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2322.298407][ T6211] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2322.304190][ T6211] ? do_futex+0x23a0/0x3e40 [ 2322.308670][ T6211] ion_buffer_alloc+0x20f/0x630 [ 2322.318295][ T6211] ion_dmabuf_alloc+0xcb/0x230 [ 2322.323059][ T6211] ? track_buffer_created+0x1c0/0x1c0 [ 2322.328413][ T6211] ? check_stack_object+0x5a/0x90 [ 2322.333424][ T6211] ion_ioctl+0x2e8/0x9c0 [ 2322.337921][ T6211] ? debug_shrink_set+0x1b0/0x1b0 [ 2322.343990][ T6211] ? debug_shrink_set+0x1b0/0x1b0 [ 2322.351247][ T6211] do_vfs_ioctl+0x770/0x1750 [ 2322.355811][ T6211] ? selinux_file_ioctl+0x73b/0x990 [ 2322.360996][ T6211] ? ioctl_preallocate+0x250/0x250 [ 2322.366107][ T6211] ? _copy_to_user+0x8e/0xb0 [ 2322.370678][ T6211] ? __fget+0x37c/0x3c0 [ 2322.375240][ T6211] ? get_timespec64+0x1d0/0x1d0 [ 2322.380068][ T6211] ? fget_many+0x20/0x20 [ 2322.384286][ T6211] ? __x64_sys_clock_gettime+0x20d/0x260 [ 2322.390328][ T6211] ? security_file_ioctl+0xad/0xc0 [ 2322.395419][ T6211] __x64_sys_ioctl+0xd4/0x110 [ 2322.400077][ T6211] do_syscall_64+0xcb/0x150 [ 2322.404566][ T6211] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2322.410441][ T6211] RIP: 0033:0x45d239 [ 2322.414344][ T6211] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2322.433924][ T6211] RSP: 002b:00007f9e484fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2322.442343][ T6211] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2322.450290][ T6211] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2322.458234][ T6211] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2322.466177][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2322.474121][ T6211] R13: 00007ffe645b67ff R14: 00007f9e484fe9c0 R15: 000000000118cf4c [ 2322.482737][ T6211] Mem-Info: [ 2322.486021][ T6211] active_anon:1369021 inactive_anon:5270 isolated_anon:0 [ 2322.486021][ T6211] active_file:4180 inactive_file:589 isolated_file:12 [ 2322.486021][ T6211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2322.486021][ T6211] slab_reclaimable:14690 slab_unreclaimable:78237 [ 2322.486021][ T6211] mapped:58764 shmem:5339 pagetables:49414 bounce:0 [ 2322.486021][ T6211] free:24132 free_pcp:1075 free_cma:0 [ 2322.524681][ T6211] Node 0 active_anon:5476084kB inactive_anon:21080kB active_file:16720kB inactive_file:2456kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:235056kB dirty:0kB writeback:0kB shmem:21356kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2322.549137][ T6211] DMA free:15904kB min:24kB low:36kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2322.575109][ T6211] lowmem_reserve[]: 0 2912 6416 6416 [ 2322.579618][ T5] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2322.580454][ T6211] DMA32 free:44472kB min:20548kB low:23528kB high:26508kB active_anon:2798392kB inactive_anon:2200kB active_file:5564kB inactive_file:1100kB unevictable:0kB writepending:176kB present:3129332kB managed:2983768kB mlocked:0kB kernel_stack:4224kB pagetables:3656kB bounce:0kB free_pcp:1996kB local_pcp:1504kB free_cma:0kB [ 2322.617965][ T6211] lowmem_reserve[]: 0 0 3504 3504 [ 2322.623041][ T6211] Normal free:35424kB min:24744kB low:28332kB high:31920kB active_anon:2677876kB inactive_anon:18880kB active_file:11152kB inactive_file:1288kB unevictable:0kB writepending:208kB present:4718592kB managed:3588928kB mlocked:0kB kernel_stack:57984kB pagetables:193968kB bounce:0kB free_pcp:2348kB local_pcp:1432kB free_cma:0kB [ 2322.653390][ T6211] lowmem_reserve[]: 0 0 0 0 [ 2322.657901][ T6211] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15904kB [ 2322.671239][ T6211] DMA32: 1416*4kB (UMEH) 1663*8kB (UMEH) 1144*16kB (UMEH) 112*32kB (UMEH) 17*64kB (UMH) 9*128kB (MH) 4*256kB (MH) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 44632kB [ 2322.687547][ T6211] Normal: 1802*4kB (UMEH) 1301*8kB (UMEH) 825*16kB (UMEH) 47*32kB (MEH) 7*64kB (H) 6*128kB (H) 5*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 35328kB [ 2322.703270][ T6211] 10108 total pagecache pages [ 2322.707966][ T6211] 0 pages in swap cache [ 2322.712144][ T6211] Swap cache stats: add 0, delete 0, find 0/0 [ 2322.718192][ T6211] Free swap = 0kB [ 2322.721979][ T6211] Total swap = 0kB [ 2322.726907][ T6211] 1965979 pages RAM [ 2322.730741][ T6211] 0 pages HighMem/MovableOnly [ 2322.735498][ T6211] 318829 pages reserved [ 2322.739666][ T6211] 0 pages cma reserved [ 2322.859648][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2322.979711][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2322.990446][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.001317][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2323.011103][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2323.024034][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2323.033104][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.042071][ T5] usb 5-1: config 0 descriptor?? [ 2323.520179][ T5] hid (null): unknown global tag 0xe [ 2323.530256][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0027/input/input74 [ 2323.543261][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0027/input/input75 [ 2323.565096][ T5] kye 0003:0458:5013.0027: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2323.721355][ T5] usb 5-1: USB disconnect, device number 112 00:51:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:28 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffffe0) 00:51:28 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:28 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x9, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:28 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:28 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffffea) 00:51:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:28 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, r0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2324.539643][T21360] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2324.779672][T21360] usb 5-1: Using ep0 maxpacket: 16 [ 2324.909700][T21360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2324.920420][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.931306][T21360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.941150][T21360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2324.954047][T21360] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2324.963109][T21360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.971856][T21360] usb 5-1: config 0 descriptor?? [ 2325.450197][T21360] hid (null): unknown global tag 0xe [ 2325.459762][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0028/input/input76 [ 2325.476246][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0028/input/input77 [ 2325.493110][T21360] kye 0003:0458:5013.0028: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2325.651267][T21360] usb 5-1: USB disconnect, device number 113 00:51:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:30 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffffffef) 00:51:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, 0xffffffffffffffff) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:30 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x40) 00:51:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:30 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfffffff0) 00:51:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(0xffffffffffffffff, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2326.439657][ T5] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2326.679661][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2326.799720][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2326.810439][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2326.822072][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2326.832240][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2326.845721][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2326.855226][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.864184][ T5] usb 5-1: config 0 descriptor?? [ 2327.330222][ T5] hid (null): unknown global tag 0xe [ 2327.340560][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0029/input/input78 [ 2327.353321][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0029/input/input79 [ 2327.375148][ T5] kye 0003:0458:5013.0029: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2327.531172][ T5] usb 5-1: USB disconnect, device number 114 00:51:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000240)=@string={0x2f, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:32 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xfffffffe) 00:51:32 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000000)='./bus\x00', 0x24) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'dummy0\x00', 0xf85c}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xa1a06) 00:51:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:32 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xffff00000000) 00:51:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2328.127998][ T6356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.170918][ T6367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.329648][ T5] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2328.569677][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2328.689749][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2328.700484][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.711395][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.721178][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2328.734146][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2328.743216][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.752051][ T5] usb 5-1: config 0 descriptor?? [ 2329.230201][ T5] hid (null): unknown global tag 0xe [ 2329.241976][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002A/input/input80 [ 2329.254757][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002A/input/input81 [ 2329.270014][ T5] kye 0003:0458:5013.002A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2329.431176][ T5] usb 5-1: USB disconnect, device number 115 00:51:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000240)=@string={0x2f, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:34 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1000000000000) 00:51:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:34 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000080)={0x2, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x8, 0xfffe, 0x800, 0x9}, 'syz0\x00', 0xe}) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f0000000040)='./bus\x00', 0x1d1) 00:51:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) dup2(r4, r5) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:34 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x40030000000000) [ 2329.963013][ T6393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2329.981321][ T6401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2330.042880][ T6412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2330.067473][ T6414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2330.229648][ T5] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2330.479643][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2330.599710][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2330.610487][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2330.622139][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.632291][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2330.645587][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2330.654996][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.664071][ T5] usb 5-1: config 0 descriptor?? [ 2331.140204][ T5] hid (null): unknown global tag 0xe [ 2331.149870][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002B/input/input82 [ 2331.165998][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002B/input/input83 [ 2331.192433][ T5] kye 0003:0458:5013.002B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2331.341264][ T5] usb 5-1: USB disconnect, device number 116 00:51:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000240)=@string={0x2f, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:36 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x100000000000000) 00:51:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:51:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:51:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) 00:51:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2331.872651][ T6444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2331.909682][ T6453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2332.139686][ T5] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2332.379652][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2332.509736][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2332.520464][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2332.531356][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2332.541197][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2332.554182][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2332.563240][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.572487][ T5] usb 5-1: config 0 descriptor?? [ 2333.050200][ T5] hid (null): unknown global tag 0xe [ 2333.060086][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002C/input/input84 [ 2333.073381][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002C/input/input85 [ 2333.091176][ T5] kye 0003:0458:5013.002C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2333.251698][T21360] usb 5-1: USB disconnect, device number 117 00:51:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f0000000240)=@string={0x32, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd59"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:38 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x12f000000000000) 00:51:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:51:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:51:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) [ 2333.773101][ T6484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) [ 2333.833220][ T6492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2334.059723][ T5] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2334.299638][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2334.419729][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2334.430447][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2334.441624][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2334.451412][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2334.464330][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2334.473415][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.482056][ T5] usb 5-1: config 0 descriptor?? [ 2334.950134][ T5] hid (null): unknown global tag 0xe [ 2334.959514][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002D/input/input86 [ 2334.972829][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002D/input/input87 [ 2335.000625][ T5] kye 0003:0458:5013.002D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2335.161187][ T5] usb 5-1: USB disconnect, device number 118 00:51:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f0000000240)=@string={0x32, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd59"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf1"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:51:39 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x200000000000000) 00:51:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:51:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:40 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x300000000000000) [ 2335.688375][ T6529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2335.700229][ T6537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:51:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2335.731893][ T6543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2335.746885][ T6546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2335.949651][T21360] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2335.959800][ T5] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2336.189655][T21360] usb 6-1: Using ep0 maxpacket: 16 [ 2336.209646][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2336.309725][T21360] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2336.320597][T21360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.332194][T21360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.339732][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2336.342755][T21360] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2336.353328][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.366495][T21360] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2336.377044][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.386297][T21360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.395869][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2336.406677][T21360] usb 6-1: config 0 descriptor?? [ 2336.416792][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2336.430231][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.438796][ T5] usb 5-1: config 0 descriptor?? [ 2336.904317][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.002E/input/input88 [ 2336.917959][T21360] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.002E/input/input89 [ 2336.920375][ T5] hid (null): unknown global tag 0xe [ 2336.948299][T21360] kye 0003:0458:5013.002E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 2336.950977][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002F/input/input90 [ 2336.991446][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.002F/input/input91 [ 2337.006821][ T5] kye 0003:0458:5013.002F: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2337.105284][T21360] usb 6-1: USB disconnect, device number 41 [ 2337.121567][ T700] usb 5-1: USB disconnect, device number 119 00:51:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:41 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x400000000000000) 00:51:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(r0, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = dup2(r5, r6) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f0000000240)=@string={0x32, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd59"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x810002, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r0, r3) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:41 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x500000000000000) 00:51:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) r7 = dup2(r0, 0xffffffffffffffff) r8 = dup2(0xffffffffffffffff, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2337.639162][ T6586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2337.668840][ T6593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) [ 2337.717031][ T6604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2337.772261][ T6624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2337.959700][ T5] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2338.209659][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2338.329773][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2338.340606][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2338.351582][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2338.361341][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2338.374306][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2338.383473][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2338.392528][ T5] usb 5-1: config 0 descriptor?? [ 2338.870196][ T5] hid (null): unknown global tag 0xe [ 2338.879550][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0030/input/input92 [ 2338.893013][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0030/input/input93 [ 2338.916878][ T5] kye 0003:0458:5013.0030: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2339.071266][ T700] usb 5-1: USB disconnect, device number 120 00:51:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) r7 = dup2(r0, 0xffffffffffffffff) r8 = dup2(0xffffffffffffffff, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:43 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x600000000000000) 00:51:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x34, &(0x7f0000000240)=@string={0x34, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b76"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd8, 0x3ed, 0x800, 0x70bd2a, 0x25dfdbfb, "ac8fd0b729924ca2378d5e3b0183f334051fdfb0d7d94b1efd48219bca532634917b8a47336a53c9a2479bf41dc00c41cb14ca3e31e56d4e913b582d832c61f2d39215c38b597acdae3fe1fdf3a3e347e26c2ed3deef3ebf6516b98a89643ddb8be6fc84505d9a825d7588e4a42cacbd56d47948858abc1d5d17dee9d6e582b8d62bdf0fbb4a7633dd797a9539fbbaa28ba1d285a6b8e188ba3d5fb9faa54a9880d846a7b8b05f5745bf3c1679db4af608e92796a4cdf7cab2aaca1ac1f2f5b0d5a0dc8827", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) ftruncate(0xffffffffffffffff, 0x0) 00:51:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000000)=0x2, 0x4) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:43 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x11c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x559a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6578c754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x555fd3d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c20245f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc90ad94}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41845443}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb73e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc460cc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14cea6f6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a2b80fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 00:51:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) r7 = dup2(r0, 0xffffffffffffffff) r8 = dup2(0xffffffffffffffff, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2339.599872][ T6653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:43 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x700000000000000) 00:51:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2339.650633][ T6668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2339.691407][ T6678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2339.717212][ T6683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2339.869729][ T5] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2340.129681][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2340.259721][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2340.270491][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2340.283140][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.293072][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2340.306589][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2340.315919][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.325145][ T5] usb 5-1: config 0 descriptor?? [ 2340.810208][ T5] hid (null): unknown global tag 0xe [ 2340.820939][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0031/input/input94 [ 2340.834379][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0031/input/input95 [ 2340.859869][ T5] kye 0003:0458:5013.0031: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2341.011231][ T5] usb 5-1: USB disconnect, device number 121 00:51:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x34, &(0x7f0000000240)=@string={0x34, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b76"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x10000000}) ftruncate(0xffffffffffffffff, 0x0) 00:51:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:45 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x800000000000000) 00:51:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b, 0x0, 0xffffffffffffffff, 0x11a000}) 00:51:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:45 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x900000000000000) 00:51:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2341.550286][ T6715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2341.564214][ T6719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2341.600292][ T6732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2341.614830][ T6734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2341.789684][ T700] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2342.029685][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2342.149769][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2342.160730][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2342.171865][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2342.181921][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2342.195923][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2342.205722][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.214990][ T700] usb 5-1: config 0 descriptor?? [ 2342.690244][ T700] hid (null): unknown global tag 0xe [ 2342.700969][ T700] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0032/input/input96 [ 2342.714263][ T700] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0032/input/input97 [ 2342.741330][ T700] kye 0003:0458:5013.0032: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2342.891456][ T700] usb 5-1: USB disconnect, device number 122 00:51:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x34, &(0x7f0000000240)=@string={0x34, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b76"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:47 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5453, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x4080, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000040)=[r4, r0]}, 0x2) 00:51:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:47 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xa00000000000000) 00:51:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:47 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2343.448205][ T6765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2343.489373][ T6779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2343.669672][ T700] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2343.929732][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2344.049818][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2344.060836][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.073443][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2344.084233][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2344.102619][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2344.113240][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.124587][ T700] usb 5-1: config 0 descriptor?? [ 2344.449832][ T7837] kworker/dying (7837) used greatest stack depth: 18016 bytes left [ 2344.600268][ T700] hid (null): unknown global tag 0xe [ 2344.610569][ T700] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0033/input/input98 [ 2344.624458][ T700] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0033/input/input99 [ 2344.646832][ T700] kye 0003:0458:5013.0033: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 2344.802028][ T700] usb 5-1: USB disconnect, device number 123 00:51:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:49 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:49 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xb00000000000000) 00:51:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:49 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5453, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x4080, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000040)=[r4, r0]}, 0x2) 00:51:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x0, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:49 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2345.331401][ T6814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) dup2(r0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2345.374730][ T6821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2345.609694][ T5] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2345.849746][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2345.970019][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2345.982124][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2345.997142][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2346.010552][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2346.028604][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2346.038208][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.047504][ T5] usb 5-1: config 0 descriptor?? [ 2346.579813][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2346.587120][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2346.596355][ T5] usb 5-1: USB disconnect, device number 124 00:51:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:51 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:51 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xc00000000000000) 00:51:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) dup2(r0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:51 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5453, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x4080, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000040)=[r4, r0]}, 0x2) 00:51:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) dup2(r0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:51 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:51 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xd00000000000000) 00:51:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) [ 2347.033635][ T6857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2347.064819][ T6862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2347.109848][ T6872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2347.127501][ T6877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2347.299961][ T5] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2347.549776][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2347.679904][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2347.691963][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2347.707715][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2347.721081][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2347.734883][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2347.744685][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.753596][ T5] usb 5-1: config 0 descriptor?? [ 2348.289797][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2348.297048][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2348.309688][ T5] usb 5-1: USB disconnect, device number 125 00:51:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:53 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:53 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xe00000000000000) 00:51:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:53 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5453, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x4080, 0x0) 00:51:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, 0xffffffffffffffff) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:51:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) [ 2348.747110][ T6896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2348.782720][ T6907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2349.009762][ T700] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2349.249755][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2349.369864][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2349.382644][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2349.396219][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2349.407791][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2349.424340][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2349.435608][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.446262][ T700] usb 5-1: config 0 descriptor?? [ 2349.989797][ T700] usbhid 5-1:0.0: can't add hid device: -71 [ 2349.995996][ T700] usbhid: probe of 5-1:0.0 failed with error -71 [ 2350.004680][ T700] usb 5-1: USB disconnect, device number 126 00:51:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 00:51:54 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0xf00000000000000) 00:51:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, 0xffffffffffffffff) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) 00:51:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5453, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 00:51:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) 00:51:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, 0xffffffffffffffff) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) [ 2350.427017][ T6937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(0xffffffffffffffff, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2350.474185][ T6950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2350.699773][ T5] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2350.949725][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2351.079835][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2351.090660][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.101942][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.112010][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2351.125444][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2351.135102][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.147566][ T5] usb 5-1: config 0 descriptor?? [ 2351.699833][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2351.706107][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2351.714973][ T5] usb 5-1: USB disconnect, device number 127 00:51:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 00:51:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:51:56 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1000000000000000) 00:51:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(0xffffffffffffffff, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:56 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r5, 0x5453, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)) 00:51:56 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1100000000000000) 00:51:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x0, 0x2000000020d}) 00:51:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2352.132366][ T6976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2352.142694][ T6982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2352.168495][ T6986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(0xffffffffffffffff, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b}) [ 2352.188118][ T6992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2352.449739][ T700] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2352.699698][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2352.819796][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2352.830531][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2352.841409][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2352.851194][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2352.864102][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2352.873178][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.882018][ T700] usb 5-1: config 0 descriptor?? [ 2353.419724][ T700] usbhid 5-1:0.0: can't add hid device: -71 [ 2353.425669][ T700] usbhid: probe of 5-1:0.0 failed with error -71 [ 2353.433043][ T700] usb 5-1: USB disconnect, device number 2 00:51:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 00:51:58 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x1200000000000000) 00:51:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) r8 = dup2(r7, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:51:58 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)) 00:51:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) r8 = dup2(r7, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b}) 00:51:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2353.866161][ T7020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x12a, 0x29, 0x1, {0x7f, [{{0x10, 0x0, 0x8}, 0x6, 0xe2, 0x5, './bus'}, {{0x1, 0x3, 0x80}, 0x6, 0x3, 0x5, './bus'}, {{0x2, 0x3, 0x4}, 0x3b2, 0xe7, 0x5, './bus'}, {{0x10, 0x3, 0x5}, 0x1, 0x40, 0x5, './bus'}, {{0x10, 0x1}, 0x5, 0xd7, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x80000001, 0x79}, {{0x10, 0x2, 0x5}, 0x200, 0x2, 0x5, './bus'}, {{0x1, 0x4, 0x4}, 0x7, 0x81, 0x5, './bus'}, {{0x2, 0x3, 0x8}, 0x1, 0x36, 0x5, './bus'}, {{0x8, 0x0, 0x4}, 0x7fff, 0x4, 0x5, './bus'}]}}, 0x12a) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x2c) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 00:51:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r7) r8 = dup2(r7, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2353.908968][ T7037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2354.139699][ T700] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2354.379688][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2354.499776][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2354.510492][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.521365][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2354.531109][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2354.544096][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2354.553142][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.561819][ T700] usb 5-1: config 0 descriptor?? [ 2355.099749][ T700] usbhid 5-1:0.0: can't add hid device: -71 [ 2355.105862][ T700] usbhid: probe of 5-1:0.0 failed with error -71 [ 2355.114331][ T700] usb 5-1: USB disconnect, device number 3 00:51:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:51:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2000000000000000) 00:51:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:59 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)) 00:51:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) dup2(r7, r8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:59 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000240)={0x8, 'veth0\x00', {'veth1_virt_wifi\x00'}, 0x7}) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x20000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000040)=[r4, r0]}, 0x2) 00:51:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) dup2(r7, r8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2355.556717][ T7081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:51:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2355.598252][ T7087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:51:59 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x2500000000000000) 00:51:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) dup2(r7, r8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2355.684963][ T7108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2355.724968][ T7111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2355.829807][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2356.079705][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2356.209801][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2356.220537][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2356.231400][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2356.241152][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2356.254080][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2356.263164][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.272025][ T5] usb 5-1: config 0 descriptor?? [ 2356.809764][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2356.815732][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2356.823132][ T5] usb 5-1: USB disconnect, device number 4 00:52:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:52:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, 0x0) 00:52:01 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x3f00000000000000) 00:52:01 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)) 00:52:01 executing program 2 (fault-call:6 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2357.256620][ T7138] FAULT_INJECTION: forcing a failure. [ 2357.256620][ T7138] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.275628][ T7140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2357.277258][ T7138] CPU: 1 PID: 7138 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2357.292904][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.302955][ T7138] Call Trace: [ 2357.306273][ T7138] dump_stack+0x14a/0x1ce [ 2357.310624][ T7138] ? devkmsg_release+0x11c/0x11c [ 2357.315569][ T7138] ? show_regs_print_info+0x12/0x12 [ 2357.320760][ T7138] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2357.326825][ T7138] should_fail+0x6fb/0x860 [ 2357.331244][ T7138] ? setup_fault_attr+0x3d0/0x3d0 [ 2357.336261][ T7138] ? __down_read+0xf1/0x210 [ 2357.340783][ T7138] ? stack_trace_save+0x1f0/0x1f0 [ 2357.345808][ T7138] ? ion_buffer_alloc+0x141/0x630 [ 2357.350840][ T7138] should_failslab+0x5/0x20 [ 2357.355334][ T7138] kmem_cache_alloc_trace+0x39/0x280 [ 2357.360609][ T7138] ? arch_stack_walk+0xd8/0x120 [ 2357.365456][ T7138] ion_buffer_alloc+0x141/0x630 [ 2357.370301][ T7138] ion_dmabuf_alloc+0xcb/0x230 [ 2357.375057][ T7138] ? track_buffer_created+0x1c0/0x1c0 [ 2357.380420][ T7138] ? check_stack_object+0x5a/0x90 [ 2357.385436][ T7138] ion_ioctl+0x2e8/0x9c0 [ 2357.389671][ T7138] ? get_pid_task+0x86/0x90 [ 2357.394182][ T7138] ? proc_fail_nth_write+0x18f/0x250 [ 2357.399457][ T7138] ? debug_shrink_set+0x1b0/0x1b0 [ 2357.400377][ T7157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2357.404475][ T7138] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2357.404490][ T7138] ? memset+0x1f/0x40 [ 2357.420820][ T7138] ? fsnotify+0x13a0/0x1460 [ 2357.425315][ T7138] ? debug_shrink_set+0x1b0/0x1b0 [ 2357.430346][ T7138] do_vfs_ioctl+0x770/0x1750 [ 2357.434929][ T7138] ? selinux_file_ioctl+0x73b/0x990 [ 2357.440119][ T7138] ? ioctl_preallocate+0x250/0x250 [ 2357.445226][ T7138] ? __fget+0x37c/0x3c0 [ 2357.449371][ T7138] ? vfs_write+0x427/0x4f0 [ 2357.453770][ T7138] ? fget_many+0x20/0x20 [ 2357.457994][ T7138] ? ksys_write+0x25d/0x2c0 [ 2357.462477][ T7138] ? file_open_root+0x450/0x450 [ 2357.467307][ T7138] ? security_file_ioctl+0xad/0xc0 [ 2357.472399][ T7138] __x64_sys_ioctl+0xd4/0x110 [ 2357.477058][ T7138] do_syscall_64+0xcb/0x150 [ 2357.481544][ T7138] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2357.487419][ T7138] RIP: 0033:0x45d239 [ 2357.491381][ T7138] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2357.510968][ T7138] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2357.519366][ T7138] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2357.527319][ T7138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2357.535278][ T7138] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.543229][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 00:52:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:01 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4000000000000000) 00:52:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, 0x0) [ 2357.551181][ T7138] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2357.603260][ T7173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2357.631965][ T7175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2357.709832][ T700] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2357.949717][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2358.069821][ T700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2358.080581][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2358.092714][ T700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2358.102851][ T700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2358.116159][ T700] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2358.125536][ T700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.134548][ T700] usb 5-1: config 0 descriptor?? [ 2358.669742][ T700] usbhid 5-1:0.0: can't add hid device: -71 [ 2358.675760][ T700] usbhid: probe of 5-1:0.0 failed with error -71 [ 2358.683561][ T700] usb 5-1: USB disconnect, device number 5 00:52:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:52:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:03 executing program 2 (fault-call:6 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, 0x0) 00:52:03 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4800000000000000) 00:52:03 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)) 00:52:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:52:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2359.125196][ T7199] FAULT_INJECTION: forcing a failure. [ 2359.125196][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.143034][ T7194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2359.154578][ T7199] CPU: 1 PID: 7199 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2359.164671][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.174895][ T7199] Call Trace: [ 2359.178189][ T7199] dump_stack+0x14a/0x1ce [ 2359.182536][ T7199] ? devkmsg_release+0x11c/0x11c [ 2359.187468][ T7199] ? __kasan_kmalloc+0x189/0x1c0 [ 2359.192423][ T7199] ? show_regs_print_info+0x12/0x12 [ 2359.197615][ T7199] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2359.203156][ T7199] ? ion_buffer_alloc+0x141/0x630 [ 2359.208437][ T7199] ? ion_dmabuf_alloc+0xcb/0x230 [ 2359.208857][ T7217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2359.213368][ T7199] ? do_vfs_ioctl+0x770/0x1750 [ 2359.213377][ T7199] ? __x64_sys_ioctl+0xd4/0x110 [ 2359.213386][ T7199] ? do_syscall_64+0xcb/0x150 [ 2359.213405][ T7199] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2359.241041][ T7199] should_fail+0x6fb/0x860 [ 2359.245457][ T7199] ? setup_fault_attr+0x3d0/0x3d0 [ 2359.250478][ T7199] ? mutex_lock+0xa6/0x110 [ 2359.254887][ T7199] ? mutex_trylock+0xb0/0xb0 [ 2359.259478][ T7199] ? ion_system_heap_allocate+0x584/0xbf0 [ 2359.265379][ T7199] should_failslab+0x5/0x20 [ 2359.269874][ T7199] kmem_cache_alloc_trace+0x39/0x280 [ 2359.275184][ T7199] ? ion_page_pool_alloc+0x2c1/0x490 [ 2359.280461][ T7199] ion_system_heap_allocate+0x584/0xbf0 [ 2359.286015][ T7199] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2359.291998][ T7199] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2359.297443][ T7199] ? arch_stack_walk+0xd8/0x120 [ 2359.302277][ T7199] ion_buffer_alloc+0x20f/0x630 [ 2359.307120][ T7199] ion_dmabuf_alloc+0xcb/0x230 [ 2359.311868][ T7199] ? track_buffer_created+0x1c0/0x1c0 [ 2359.317222][ T7199] ? check_stack_object+0x5a/0x90 [ 2359.322231][ T7199] ion_ioctl+0x2e8/0x9c0 [ 2359.326457][ T7199] ? get_pid_task+0x86/0x90 [ 2359.330941][ T7199] ? proc_fail_nth_write+0x18f/0x250 [ 2359.336375][ T7199] ? debug_shrink_set+0x1b0/0x1b0 [ 2359.341381][ T7199] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2359.346578][ T7199] ? memset+0x1f/0x40 [ 2359.350539][ T7199] ? fsnotify+0x13a0/0x1460 [ 2359.355024][ T7199] ? debug_shrink_set+0x1b0/0x1b0 [ 2359.360035][ T7199] do_vfs_ioctl+0x770/0x1750 [ 2359.364611][ T7199] ? selinux_file_ioctl+0x73b/0x990 [ 2359.369795][ T7199] ? ioctl_preallocate+0x250/0x250 [ 2359.374887][ T7199] ? __fget+0x37c/0x3c0 [ 2359.379022][ T7199] ? vfs_write+0x427/0x4f0 [ 2359.383422][ T7199] ? fget_many+0x20/0x20 [ 2359.387643][ T7199] ? ksys_write+0x25d/0x2c0 [ 2359.392151][ T7199] ? file_open_root+0x450/0x450 [ 2359.397025][ T7199] ? security_file_ioctl+0xad/0xc0 [ 2359.402123][ T7199] __x64_sys_ioctl+0xd4/0x110 [ 2359.406791][ T7199] do_syscall_64+0xcb/0x150 [ 2359.411281][ T7199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2359.417159][ T7199] RIP: 0033:0x45d239 [ 2359.421034][ T7199] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2359.440636][ T7199] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.449034][ T7199] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2359.456998][ T7199] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2359.464962][ T7199] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 00:52:03 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x4c00000000000000) 00:52:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) [ 2359.472939][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.480901][ T7199] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c 00:52:03 executing program 2 (fault-call:6 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2359.524386][ T7225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2359.546218][ T7232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2359.571834][ T7236] FAULT_INJECTION: forcing a failure. [ 2359.571834][ T7236] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.590382][ T7236] CPU: 0 PID: 7236 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2359.600535][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.610581][ T7236] Call Trace: [ 2359.613869][ T7236] dump_stack+0x14a/0x1ce [ 2359.618241][ T7236] ? devkmsg_release+0x11c/0x11c [ 2359.623242][ T7236] ? show_regs_print_info+0x12/0x12 [ 2359.628426][ T7236] should_fail+0x6fb/0x860 [ 2359.632843][ T7236] ? setup_fault_attr+0x3d0/0x3d0 [ 2359.637884][ T7236] ? mutex_lock+0xa6/0x110 [ 2359.642280][ T7236] ? mutex_trylock+0xb0/0xb0 [ 2359.646863][ T7236] ? ion_system_heap_allocate+0x584/0xbf0 [ 2359.652587][ T7236] should_failslab+0x5/0x20 [ 2359.657077][ T7236] kmem_cache_alloc_trace+0x39/0x280 [ 2359.662336][ T7236] ? ion_page_pool_alloc+0x2c1/0x490 [ 2359.667592][ T7236] ion_system_heap_allocate+0x584/0xbf0 [ 2359.673109][ T7236] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2359.679061][ T7236] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2359.684490][ T7236] ? arch_stack_walk+0xd8/0x120 [ 2359.689330][ T7236] ion_buffer_alloc+0x20f/0x630 [ 2359.694156][ T7236] ion_dmabuf_alloc+0xcb/0x230 [ 2359.698916][ T7236] ? track_buffer_created+0x1c0/0x1c0 [ 2359.704278][ T7236] ? check_stack_object+0x5a/0x90 [ 2359.709764][ T7236] ion_ioctl+0x2e8/0x9c0 [ 2359.714207][ T7236] ? get_pid_task+0x86/0x90 [ 2359.718756][ T7236] ? proc_fail_nth_write+0x18f/0x250 [ 2359.724026][ T7236] ? debug_shrink_set+0x1b0/0x1b0 [ 2359.729024][ T7236] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2359.734216][ T7236] ? memset+0x1f/0x40 [ 2359.738194][ T7236] ? fsnotify+0x13a0/0x1460 [ 2359.742666][ T7236] ? debug_shrink_set+0x1b0/0x1b0 [ 2359.747687][ T7236] do_vfs_ioctl+0x770/0x1750 [ 2359.752270][ T7236] ? selinux_file_ioctl+0x73b/0x990 [ 2359.757456][ T7236] ? ioctl_preallocate+0x250/0x250 [ 2359.763643][ T7236] ? __fget+0x37c/0x3c0 [ 2359.767862][ T7236] ? vfs_write+0x427/0x4f0 [ 2359.772526][ T7236] ? fget_many+0x20/0x20 [ 2359.776755][ T7236] ? ksys_write+0x25d/0x2c0 [ 2359.781252][ T7236] ? file_open_root+0x450/0x450 [ 2359.786236][ T7236] ? security_file_ioctl+0xad/0xc0 [ 2359.791340][ T7236] __x64_sys_ioctl+0xd4/0x110 [ 2359.796012][ T7236] do_syscall_64+0xcb/0x150 [ 2359.803025][ T7236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2359.808897][ T7236] RIP: 0033:0x45d239 [ 2359.812780][ T7236] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2359.832359][ T7236] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.840747][ T7236] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2359.848697][ T7236] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2359.856692][ T7236] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2359.864638][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.872581][ T7236] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2359.889714][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2360.139688][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 2360.259791][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2360.270516][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2360.281406][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2360.291183][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2360.304122][ T5] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2360.313176][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.321948][ T5] usb 5-1: config 0 descriptor?? [ 2360.879757][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 2360.885747][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 2360.894039][ T5] usb 5-1: USB disconnect, device number 6 00:52:05 executing program 2 (fault-call:6 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:05 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6000000000000000) 00:52:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2000000022b}) 00:52:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)) 00:52:05 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:52:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x0, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:52:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2361.310984][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2361.334842][ T7258] FAULT_INJECTION: forcing a failure. [ 2361.334842][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.351844][ T7259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2361.367478][ T7258] CPU: 0 PID: 7258 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2361.377554][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.387601][ T7258] Call Trace: [ 2361.390888][ T7258] dump_stack+0x14a/0x1ce [ 2361.395214][ T7258] ? devkmsg_release+0x11c/0x11c [ 2361.400173][ T7258] ? show_regs_print_info+0x12/0x12 [ 2361.405395][ T7258] ? memset+0x1f/0x40 [ 2361.409393][ T7258] ? sg_alloc_table+0x313/0x630 [ 2361.414243][ T7258] ? sg_next+0x8b/0xa0 [ 2361.418311][ T7258] should_fail+0x6fb/0x860 [ 2361.422724][ T7258] ? setup_fault_attr+0x3d0/0x3d0 [ 2361.427746][ T7258] ? __up_read+0x6f/0x1b0 [ 2361.432071][ T7258] ? _raw_spin_lock+0xa1/0x170 [ 2361.436835][ T7258] ? kzalloc+0x1b/0x30 [ 2361.440896][ T7258] should_failslab+0x5/0x20 [ 2361.445394][ T7258] __kmalloc+0x5f/0x2d0 [ 2361.449533][ T7258] kzalloc+0x1b/0x30 [ 2361.453408][ T7258] dma_buf_export+0x166/0x7b0 [ 2361.458067][ T7258] ion_dmabuf_alloc+0x199/0x230 [ 2361.462896][ T7258] ? track_buffer_created+0x1c0/0x1c0 [ 2361.468251][ T7258] ? check_stack_object+0x5a/0x90 [ 2361.473254][ T7258] ion_ioctl+0x2e8/0x9c0 [ 2361.477573][ T7258] ? get_pid_task+0x86/0x90 [ 2361.482059][ T7258] ? proc_fail_nth_write+0x18f/0x250 [ 2361.487326][ T7258] ? debug_shrink_set+0x1b0/0x1b0 [ 2361.492330][ T7258] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2361.497506][ T7258] ? memset+0x1f/0x40 [ 2361.501468][ T7258] ? fsnotify+0x13a0/0x1460 [ 2361.505966][ T7258] ? debug_shrink_set+0x1b0/0x1b0 [ 2361.510970][ T7258] do_vfs_ioctl+0x770/0x1750 [ 2361.515541][ T7258] ? selinux_file_ioctl+0x73b/0x990 [ 2361.520728][ T7258] ? ioctl_preallocate+0x250/0x250 [ 2361.525821][ T7258] ? __fget+0x37c/0x3c0 [ 2361.529954][ T7258] ? vfs_write+0x427/0x4f0 [ 2361.534351][ T7258] ? fget_many+0x20/0x20 [ 2361.538594][ T7258] ? ksys_write+0x25d/0x2c0 [ 2361.543078][ T7258] ? file_open_root+0x450/0x450 [ 2361.547908][ T7258] ? security_file_ioctl+0xad/0xc0 [ 2361.553023][ T7258] __x64_sys_ioctl+0xd4/0x110 [ 2361.557685][ T7258] do_syscall_64+0xcb/0x150 [ 2361.562190][ T7258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.568066][ T7258] RIP: 0033:0x45d239 [ 2361.571952][ T7258] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2361.591541][ T7258] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.600203][ T7258] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2361.608155][ T7258] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 00:52:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) 00:52:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2361.616107][ T7258] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.624080][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2361.632034][ T7258] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c 00:52:06 executing program 2 (fault-call:6 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:06 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6800000000000000) 00:52:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff}) [ 2361.772043][ T7292] FAULT_INJECTION: forcing a failure. [ 2361.772043][ T7292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2361.796802][ T7292] CPU: 1 PID: 7292 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2361.806888][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.811557][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2361.816936][ T7292] Call Trace: [ 2361.827393][ T7292] dump_stack+0x14a/0x1ce [ 2361.831714][ T7292] ? devkmsg_release+0x11c/0x11c [ 2361.836641][ T7292] ? show_regs_print_info+0x12/0x12 [ 2361.841837][ T7292] ? get_page_from_freelist+0x7c0/0x7c0 [ 2361.847371][ T7292] should_fail+0x6fb/0x860 [ 2361.851779][ T7292] ? setup_fault_attr+0x3d0/0x3d0 [ 2361.852521][ T7297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2361.856819][ T7292] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2361.869343][ T7292] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2361.874885][ T7292] ? ion_page_pool_alloc+0x320/0x490 [ 2361.880163][ T7292] ion_system_heap_allocate+0x2b4/0xbf0 [ 2361.885701][ T7292] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2361.891684][ T7292] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2361.897141][ T7292] ? arch_stack_walk+0xd8/0x120 [ 2361.906253][ T7292] ion_buffer_alloc+0x20f/0x630 [ 2361.911202][ T7292] ion_dmabuf_alloc+0xcb/0x230 [ 2361.915938][ T7292] ? track_buffer_created+0x1c0/0x1c0 [ 2361.921281][ T7292] ? check_stack_object+0x5a/0x90 [ 2361.926276][ T7292] ion_ioctl+0x2e8/0x9c0 [ 2361.930498][ T7292] ? get_pid_task+0x86/0x90 [ 2361.934976][ T7292] ? proc_fail_nth_write+0x18f/0x250 [ 2361.940234][ T7292] ? debug_shrink_set+0x1b0/0x1b0 [ 2361.945241][ T7292] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2361.950420][ T7292] ? memset+0x1f/0x40 [ 2361.954390][ T7292] ? fsnotify+0x13a0/0x1460 [ 2361.958870][ T7292] ? debug_shrink_set+0x1b0/0x1b0 [ 2361.963867][ T7292] do_vfs_ioctl+0x770/0x1750 [ 2361.968429][ T7292] ? selinux_file_ioctl+0x73b/0x990 [ 2361.973596][ T7292] ? ioctl_preallocate+0x250/0x250 [ 2361.978693][ T7292] ? __fget+0x37c/0x3c0 [ 2361.982916][ T7292] ? vfs_write+0x427/0x4f0 [ 2361.987330][ T7292] ? fget_many+0x20/0x20 [ 2361.991582][ T7292] ? ksys_write+0x25d/0x2c0 [ 2361.996071][ T7292] ? file_open_root+0x450/0x450 [ 2362.000892][ T7292] ? security_file_ioctl+0xad/0xc0 [ 2362.005983][ T7292] __x64_sys_ioctl+0xd4/0x110 [ 2362.010633][ T7292] do_syscall_64+0xcb/0x150 [ 2362.015127][ T7292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2362.021003][ T7292] RIP: 0033:0x45d239 [ 2362.024879][ T7292] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2362.044465][ T7292] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2362.052864][ T7292] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2362.060825][ T7292] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 00:52:06 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)) [ 2362.068773][ T7292] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.076719][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2362.084668][ T7292] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2362.096999][ T700] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2362.389701][ T700] usb 5-1: device descriptor read/64, error 18 [ 2362.779718][ T700] usb 5-1: device descriptor read/64, error 18 [ 2363.049730][ T700] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2363.319724][ T700] usb 5-1: device descriptor read/64, error 18 [ 2363.709736][ T700] usb 5-1: device descriptor read/64, error 18 [ 2363.829800][ T700] usb usb5-port1: attempt power cycle 00:52:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:08 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x6c00000000000000) 00:52:08 executing program 2 (fault-call:6 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:08 executing program 3 (fault-call:10 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x10) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r5, 0x5453, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)) 00:52:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r4, r5) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2364.340626][ T7821] kworker/dying (7821) used greatest stack depth: 17888 bytes left [ 2364.364802][ T7310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:52:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2364.400490][ T7315] FAULT_INJECTION: forcing a failure. [ 2364.400490][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.400524][ T7312] FAULT_INJECTION: forcing a failure. [ 2364.400524][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.435909][ T7320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2364.453781][ T7312] CPU: 1 PID: 7312 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2364.463872][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2364.473943][ T7312] Call Trace: [ 2364.477227][ T7312] dump_stack+0x14a/0x1ce [ 2364.481546][ T7312] ? devkmsg_release+0x11c/0x11c [ 2364.486475][ T7312] ? show_regs_print_info+0x12/0x12 [ 2364.491670][ T7312] should_fail+0x6fb/0x860 [ 2364.496077][ T7312] ? setup_fault_attr+0x3d0/0x3d0 [ 2364.501092][ T7312] ? security_inode_alloc+0x32/0x1f0 [ 2364.506362][ T7312] should_failslab+0x5/0x20 [ 2364.510869][ T7312] kmem_cache_alloc+0x36/0x260 [ 2364.515616][ T7312] ? from_kuid_munged+0x3b0/0x3b0 [ 2364.520631][ T7312] security_inode_alloc+0x32/0x1f0 [ 2364.525729][ T7312] inode_init_always+0x37c/0x800 [ 2364.530647][ T7312] new_inode_pseudo+0x7b/0x240 [ 2364.535413][ T7312] alloc_anon_inode+0x1a/0x2e0 [ 2364.540161][ T7312] dma_buf_export+0x433/0x7b0 [ 2364.544821][ T7312] ion_dmabuf_alloc+0x199/0x230 [ 2364.550443][ T7312] ? track_buffer_created+0x1c0/0x1c0 [ 2364.555803][ T7312] ? check_stack_object+0x5a/0x90 [ 2364.560810][ T7312] ion_ioctl+0x2e8/0x9c0 [ 2364.565039][ T7312] ? get_pid_task+0x86/0x90 [ 2364.569529][ T7312] ? proc_fail_nth_write+0x18f/0x250 [ 2364.574818][ T7312] ? debug_shrink_set+0x1b0/0x1b0 [ 2364.579824][ T7312] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2364.585017][ T7312] ? memset+0x1f/0x40 [ 2364.588992][ T7312] ? fsnotify+0x13a0/0x1460 [ 2364.593476][ T7312] ? debug_shrink_set+0x1b0/0x1b0 [ 2364.598487][ T7312] do_vfs_ioctl+0x770/0x1750 [ 2364.603064][ T7312] ? selinux_file_ioctl+0x73b/0x990 [ 2364.608247][ T7312] ? ioctl_preallocate+0x250/0x250 [ 2364.613431][ T7312] ? __fget+0x37c/0x3c0 [ 2364.617573][ T7312] ? vfs_write+0x427/0x4f0 [ 2364.621971][ T7312] ? fget_many+0x20/0x20 [ 2364.626209][ T7312] ? ksys_write+0x25d/0x2c0 [ 2364.630695][ T7312] ? file_open_root+0x450/0x450 [ 2364.635529][ T7312] ? security_file_ioctl+0xad/0xc0 [ 2364.640625][ T7312] __x64_sys_ioctl+0xd4/0x110 [ 2364.645389][ T7312] do_syscall_64+0xcb/0x150 [ 2364.649880][ T7312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.655760][ T7312] RIP: 0033:0x45d239 [ 2364.659644][ T7312] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2364.679234][ T7312] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.687635][ T7312] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2364.695593][ T7312] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2364.703553][ T7312] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2364.711520][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2364.719476][ T7312] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2364.727450][ T7315] CPU: 0 PID: 7315 Comm: syz-executor.3 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2364.737518][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2364.747559][ T7315] Call Trace: [ 2364.750849][ T7315] dump_stack+0x14a/0x1ce [ 2364.755193][ T7315] ? devkmsg_release+0x11c/0x11c [ 2364.760121][ T7315] ? show_regs_print_info+0x12/0x12 [ 2364.765312][ T7315] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.771381][ T7315] should_fail+0x6fb/0x860 [ 2364.775798][ T7315] ? setup_fault_attr+0x3d0/0x3d0 [ 2364.780809][ T7315] ? __down_read+0xf1/0x210 [ 2364.785310][ T7315] ? stack_trace_save+0x1f0/0x1f0 [ 2364.790318][ T7315] ? ion_buffer_alloc+0x141/0x630 [ 2364.795330][ T7315] should_failslab+0x5/0x20 [ 2364.799818][ T7315] kmem_cache_alloc_trace+0x39/0x280 [ 2364.805176][ T7315] ? arch_stack_walk+0xd8/0x120 [ 2364.810008][ T7315] ion_buffer_alloc+0x141/0x630 [ 2364.814855][ T7315] ion_dmabuf_alloc+0xcb/0x230 [ 2364.819600][ T7315] ? track_buffer_created+0x1c0/0x1c0 [ 2364.824968][ T7315] ? check_stack_object+0x5a/0x90 [ 2364.829982][ T7315] ion_ioctl+0x2e8/0x9c0 [ 2364.834214][ T7315] ? get_pid_task+0x86/0x90 [ 2364.838717][ T7315] ? proc_fail_nth_write+0x18f/0x250 [ 2364.843979][ T7315] ? debug_shrink_set+0x1b0/0x1b0 [ 2364.849001][ T7315] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2364.854180][ T7315] ? memset+0x1f/0x40 [ 2364.858167][ T7315] ? fsnotify+0x13a0/0x1460 [ 2364.862667][ T7315] ? debug_shrink_set+0x1b0/0x1b0 [ 2364.867671][ T7315] do_vfs_ioctl+0x770/0x1750 [ 2364.872248][ T7315] ? selinux_file_ioctl+0x73b/0x990 [ 2364.877426][ T7315] ? ioctl_preallocate+0x250/0x250 [ 2364.882517][ T7315] ? __fget+0x37c/0x3c0 [ 2364.886651][ T7315] ? vfs_write+0x427/0x4f0 [ 2364.891323][ T7315] ? fget_many+0x20/0x20 [ 2364.895636][ T7315] ? ksys_write+0x25d/0x2c0 [ 2364.900119][ T7315] ? file_open_root+0x450/0x450 [ 2364.904951][ T7315] ? security_file_ioctl+0xad/0xc0 [ 2364.910045][ T7315] __x64_sys_ioctl+0xd4/0x110 [ 2364.914967][ T7315] do_syscall_64+0xcb/0x150 [ 2364.919472][ T7315] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.925359][ T7315] RIP: 0033:0x45d239 [ 2364.929234][ T7315] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:09 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7400000000000000) 00:52:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2364.948827][ T7315] RSP: 002b:00007f66706e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.957222][ T7315] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2364.965174][ T7315] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000009 [ 2364.973139][ T7315] RBP: 00007f66706e9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2364.981104][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2364.989054][ T7315] R13: 00007ffc8a83e4ff R14: 00007f66706ea9c0 R15: 000000000118cf4c 00:52:09 executing program 2 (fault-call:6 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:09 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000300)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) linkat(r5, &(0x7f0000000180)='./bus\x00', r6, &(0x7f0000000280)='./bus\x00', 0x1400) r7 = dup(0xffffffffffffffff) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xf8, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xf8}}, 0x41) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f0000000240)=@string={0x35, 0x3, "e0c2e64c6717cffe561c13c1a0b4a185566a2c5179514354abf10fa0509bba3c2ca1e7c2af21fc616fc2de617f09cd594b7625"}}]}) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:52:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2365.036093][ T7328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2365.059243][ T7332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2365.078894][ T7334] FAULT_INJECTION: forcing a failure. 00:52:09 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x7a00000000000000) [ 2365.078894][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.095472][ T7334] CPU: 1 PID: 7334 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2365.105546][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.115597][ T7334] Call Trace: [ 2365.118889][ T7334] dump_stack+0x14a/0x1ce [ 2365.123213][ T7334] ? devkmsg_release+0x11c/0x11c [ 2365.128141][ T7334] ? do_syscall_64+0xcb/0x150 [ 2365.132817][ T7334] ? show_regs_print_info+0x12/0x12 [ 2365.138016][ T7334] should_fail+0x6fb/0x860 [ 2365.142421][ T7334] ? setup_fault_attr+0x3d0/0x3d0 [ 2365.147439][ T7334] ? __d_alloc+0x2a/0x6b0 [ 2365.151747][ T7334] should_failslab+0x5/0x20 [ 2365.156318][ T7334] kmem_cache_alloc+0x36/0x260 [ 2365.161080][ T7334] __d_alloc+0x2a/0x6b0 [ 2365.165218][ T7334] d_alloc_pseudo+0x19/0x70 [ 2365.169703][ T7334] alloc_file_pseudo+0x15b/0x340 [ 2365.174623][ T7334] ? alloc_empty_file_noaccount+0x70/0x70 [ 2365.180324][ T7334] ? alloc_anon_inode+0x213/0x2e0 [ 2365.185354][ T7334] ? memcpy+0x38/0x50 [ 2365.189319][ T7334] ? alloc_anon_inode+0x213/0x2e0 [ 2365.194325][ T7334] dma_buf_export+0x4e0/0x7b0 [ 2365.198992][ T7334] ion_dmabuf_alloc+0x199/0x230 [ 2365.203823][ T7334] ? track_buffer_created+0x1c0/0x1c0 [ 2365.209177][ T7334] ? check_stack_object+0x5a/0x90 [ 2365.214181][ T7334] ion_ioctl+0x2e8/0x9c0 [ 2365.218405][ T7334] ? get_pid_task+0x86/0x90 [ 2365.222890][ T7334] ? proc_fail_nth_write+0x18f/0x250 [ 2365.228157][ T7334] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.233161][ T7334] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2365.238337][ T7334] ? memset+0x1f/0x40 [ 2365.242298][ T7334] ? fsnotify+0x13a0/0x1460 [ 2365.246781][ T7334] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.251784][ T7334] do_vfs_ioctl+0x770/0x1750 [ 2365.256377][ T7334] ? selinux_file_ioctl+0x73b/0x990 [ 2365.261557][ T7334] ? ioctl_preallocate+0x250/0x250 [ 2365.266650][ T7334] ? __fget+0x37c/0x3c0 [ 2365.270786][ T7334] ? vfs_write+0x427/0x4f0 [ 2365.275182][ T7334] ? fget_many+0x20/0x20 [ 2365.279402][ T7334] ? ksys_write+0x25d/0x2c0 [ 2365.283888][ T7334] ? file_open_root+0x450/0x450 [ 2365.288722][ T7334] ? security_file_ioctl+0xad/0xc0 [ 2365.293817][ T7334] __x64_sys_ioctl+0xd4/0x110 [ 2365.298490][ T7334] do_syscall_64+0xcb/0x150 [ 2365.302979][ T7334] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.308873][ T7334] RIP: 0033:0x45d239 [ 2365.312748][ T7334] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:09 executing program 3 (fault-call:10 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:09 executing program 2 (fault-call:6 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d}) 00:52:09 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x8000000000000000) [ 2365.332332][ T7334] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.340738][ T7334] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2365.348703][ T7334] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2365.356659][ T7334] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.364695][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2365.372645][ T7334] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2365.426357][ T7345] FAULT_INJECTION: forcing a failure. [ 2365.426357][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.442488][ T7347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2365.450173][ T7342] FAULT_INJECTION: forcing a failure. [ 2365.450173][ T7342] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.464742][ T7345] CPU: 1 PID: 7345 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2365.474832][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.484874][ T7345] Call Trace: [ 2365.488164][ T7345] dump_stack+0x14a/0x1ce [ 2365.492919][ T7345] ? devkmsg_release+0x11c/0x11c [ 2365.497851][ T7345] ? show_regs_print_info+0x12/0x12 [ 2365.503054][ T7345] should_fail+0x6fb/0x860 [ 2365.507485][ T7345] ? setup_fault_attr+0x3d0/0x3d0 [ 2365.512530][ T7345] ? __alloc_file+0x26/0x390 [ 2365.517110][ T7345] should_failslab+0x5/0x20 [ 2365.521631][ T7345] kmem_cache_alloc+0x36/0x260 [ 2365.526414][ T7345] ? _raw_spin_trylock_bh+0x190/0x190 [ 2365.531791][ T7345] __alloc_file+0x26/0x390 [ 2365.536201][ T7345] ? alloc_empty_file+0x49/0x1b0 [ 2365.541139][ T7345] alloc_empty_file+0xa9/0x1b0 [ 2365.545900][ T7345] alloc_file+0x58/0x4a0 [ 2365.550167][ T7345] alloc_file_pseudo+0x28c/0x340 [ 2365.555099][ T7345] ? alloc_empty_file_noaccount+0x70/0x70 [ 2365.560820][ T7345] ? alloc_anon_inode+0x213/0x2e0 [ 2365.565838][ T7345] ? memcpy+0x38/0x50 [ 2365.569812][ T7345] ? alloc_anon_inode+0x213/0x2e0 [ 2365.574824][ T7345] dma_buf_export+0x4e0/0x7b0 [ 2365.579502][ T7345] ion_dmabuf_alloc+0x199/0x230 [ 2365.584349][ T7345] ? track_buffer_created+0x1c0/0x1c0 [ 2365.589719][ T7345] ? check_stack_object+0x5a/0x90 [ 2365.594917][ T7345] ion_ioctl+0x2e8/0x9c0 [ 2365.599159][ T7345] ? get_pid_task+0x86/0x90 [ 2365.603652][ T7345] ? proc_fail_nth_write+0x18f/0x250 [ 2365.608929][ T7345] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.613940][ T7345] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2365.619124][ T7345] ? memset+0x1f/0x40 [ 2365.623097][ T7345] ? fsnotify+0x13a0/0x1460 [ 2365.627586][ T7345] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.632597][ T7345] do_vfs_ioctl+0x770/0x1750 [ 2365.637176][ T7345] ? selinux_file_ioctl+0x73b/0x990 [ 2365.640187][ T7354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2365.642386][ T7345] ? ioctl_preallocate+0x250/0x250 [ 2365.642400][ T7345] ? __fget+0x37c/0x3c0 [ 2365.642417][ T7345] ? vfs_write+0x427/0x4f0 [ 2365.663201][ T7345] ? fget_many+0x20/0x20 [ 2365.667430][ T7345] ? ksys_write+0x25d/0x2c0 [ 2365.671913][ T7345] ? file_open_root+0x450/0x450 [ 2365.676769][ T7345] ? security_file_ioctl+0xad/0xc0 [ 2365.681867][ T7345] __x64_sys_ioctl+0xd4/0x110 [ 2365.686532][ T7345] do_syscall_64+0xcb/0x150 [ 2365.691024][ T7345] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.696901][ T7345] RIP: 0033:0x45d239 [ 2365.700798][ T7345] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2365.720389][ T7345] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.728789][ T7345] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2365.736746][ T7345] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2365.744698][ T7345] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.752740][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2365.760698][ T7345] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2365.768664][ T7342] CPU: 0 PID: 7342 Comm: syz-executor.3 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2365.778718][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2365.788757][ T7342] Call Trace: [ 2365.792038][ T7342] dump_stack+0x14a/0x1ce [ 2365.796351][ T7342] ? devkmsg_release+0x11c/0x11c [ 2365.801277][ T7342] ? show_regs_print_info+0x12/0x12 [ 2365.806459][ T7342] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.812512][ T7342] should_fail+0x6fb/0x860 [ 2365.816924][ T7342] ? setup_fault_attr+0x3d0/0x3d0 [ 2365.821924][ T7342] ? is_bpf_text_address+0x290/0x2b0 [ 2365.827187][ T7342] ? stack_trace_save+0x1f0/0x1f0 [ 2365.832194][ T7342] ? __get_vm_area_node+0x19e/0x340 [ 2365.837369][ T7342] should_failslab+0x5/0x20 [ 2365.841874][ T7342] kmem_cache_alloc_trace+0x39/0x280 [ 2365.847142][ T7342] __get_vm_area_node+0x19e/0x340 [ 2365.852164][ T7342] vmap+0xad/0x1e0 [ 2365.855867][ T7342] ? ion_buffer_zero+0x2ee/0x470 [ 2365.860786][ T7342] ion_buffer_zero+0x2ee/0x470 [ 2365.865535][ T7342] ? ion_buffer_alloc+0x630/0x630 [ 2365.870562][ T7342] ? __kasan_kmalloc+0x189/0x1c0 [ 2365.875492][ T7342] ion_system_heap_free+0x9f/0x330 [ 2365.880602][ T7342] ? _raw_spin_trylock_bh+0x190/0x190 [ 2365.885991][ T7342] ion_buffer_release+0xd4/0x250 [ 2365.890910][ T7342] _ion_heap_freelist_drain+0x2c2/0x340 [ 2365.896455][ T7342] ion_buffer_alloc+0x2b4/0x630 [ 2365.901296][ T7342] ion_dmabuf_alloc+0xcb/0x230 [ 2365.906056][ T7342] ? track_buffer_created+0x1c0/0x1c0 [ 2365.911415][ T7342] ? check_stack_object+0x5a/0x90 [ 2365.916441][ T7342] ion_ioctl+0x2e8/0x9c0 [ 2365.920667][ T7342] ? get_pid_task+0x86/0x90 [ 2365.925170][ T7342] ? proc_fail_nth_write+0x18f/0x250 [ 2365.930432][ T7342] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.935442][ T7342] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2365.940635][ T7342] ? memset+0x1f/0x40 [ 2365.944600][ T7342] ? fsnotify+0x13a0/0x1460 [ 2365.949080][ T7342] ? debug_shrink_set+0x1b0/0x1b0 [ 2365.954087][ T7342] do_vfs_ioctl+0x770/0x1750 [ 2365.958661][ T7342] ? selinux_file_ioctl+0x73b/0x990 [ 2365.963839][ T7342] ? ioctl_preallocate+0x250/0x250 [ 2365.968950][ T7342] ? __fget+0x37c/0x3c0 [ 2365.973090][ T7342] ? vfs_write+0x427/0x4f0 [ 2365.977507][ T7342] ? fget_many+0x20/0x20 [ 2365.981747][ T7342] ? ksys_write+0x25d/0x2c0 [ 2365.986230][ T7342] ? file_open_root+0x450/0x450 [ 2365.991074][ T7342] ? security_file_ioctl+0xad/0xc0 [ 2365.996253][ T7342] __x64_sys_ioctl+0xd4/0x110 [ 2366.000944][ T7342] do_syscall_64+0xcb/0x150 [ 2366.005444][ T7342] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.011338][ T7342] RIP: 0033:0x45d239 [ 2366.015335][ T7342] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2366.068788][ T7342] RSP: 002b:00007f66706e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:52:09 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) ftruncate(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0xffffffffcbddc40f, 0x986e}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x84e00, 0x0) r3 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fcntl$dupfd(r2, 0x0, r3) creat(&(0x7f0000000280)='./bus\x00', 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5453, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)) 00:52:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:10 executing program 3 (fault-call:10 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x2000000020d, 0x0, 0xffffffffffffffff}) r8 = dup2(r0, r7) r9 = dup2(r7, r8) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:10 executing program 1: creat(&(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x9effffff00000000) [ 2366.077218][ T7342] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2366.085189][ T7342] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000009 [ 2366.093152][ T7342] RBP: 00007f66706e9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.101110][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2366.109172][ T7342] R13: 00007ffc8a83e4ff R14: 00007f66706ea9c0 R15: 000000000118cf4c 00:52:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) 00:52:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10000, 0x20000000201, 0x0, 0xffffffffffffffff}) dup2(r1, r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8000, 0x2000000020d, 0x0, 0xffffffffffffffff}) dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x100000000007ff, 0x2000000022b}) [ 2366.221469][ T7361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2366.232338][ T7364] FAULT_INJECTION: forcing a failure. [ 2366.232338][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 2366.259533][ T7364] CPU: 0 PID: 7364 Comm: syz-executor.3 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2366.269612][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2366.279649][ T7364] Call Trace: [ 2366.282932][ T7364] dump_stack+0x14a/0x1ce [ 2366.287261][ T7364] ? devkmsg_release+0x11c/0x11c [ 2366.292192][ T7364] ? memset+0x1f/0x40 [ 2366.296160][ T7364] ? show_regs_print_info+0x12/0x12 [ 2366.301338][ T7364] ? __kasan_kmalloc+0x189/0x1c0 [ 2366.306258][ T7364] should_fail+0x6fb/0x860 [ 2366.310653][ T7364] ? setup_fault_attr+0x3d0/0x3d0 [ 2366.315656][ T7364] ? do_syscall_64+0xcb/0x150 [ 2366.320312][ T7364] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.326364][ T7364] ? alloc_vmap_area+0x167/0x1c50 [ 2366.331386][ T7364] should_failslab+0x5/0x20 [ 2366.335872][ T7364] kmem_cache_alloc+0x36/0x260 [ 2366.340618][ T7364] alloc_vmap_area+0x167/0x1c50 [ 2366.345454][ T7364] ? vm_map_ram+0x950/0x950 [ 2366.351066][ T7364] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2366.356503][ T7364] __get_vm_area_node+0x1ef/0x340 [ 2366.361507][ T7364] vmap+0xad/0x1e0 [ 2366.365211][ T7364] ? ion_buffer_zero+0x2ee/0x470 [ 2366.370128][ T7364] ion_buffer_zero+0x2ee/0x470 [ 2366.374871][ T7364] ? ion_buffer_alloc+0x630/0x630 [ 2366.379882][ T7364] ? __kasan_kmalloc+0x189/0x1c0 [ 2366.384811][ T7364] ion_system_heap_free+0x9f/0x330 [ 2366.389901][ T7364] ? _raw_spin_trylock_bh+0x190/0x190 [ 2366.395254][ T7364] ion_buffer_release+0xd4/0x250 [ 2366.400173][ T7364] _ion_heap_freelist_drain+0x2c2/0x340 [ 2366.405698][ T7364] ion_buffer_alloc+0x2b4/0x630 [ 2366.410533][ T7364] ion_dmabuf_alloc+0xcb/0x230 [ 2366.415280][ T7364] ? track_buffer_created+0x1c0/0x1c0 [ 2366.420634][ T7364] ? check_stack_object+0x5a/0x90 [ 2366.425639][ T7364] ion_ioctl+0x2e8/0x9c0 [ 2366.429864][ T7364] ? get_pid_task+0x86/0x90 [ 2366.434348][ T7364] ? proc_fail_nth_write+0x18f/0x250 [ 2366.439610][ T7364] ? debug_shrink_set+0x1b0/0x1b0 [ 2366.444618][ T7364] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2366.449815][ T7364] ? memset+0x1f/0x40 [ 2366.453788][ T7364] ? fsnotify+0x13a0/0x1460 [ 2366.458274][ T7364] ? debug_shrink_set+0x1b0/0x1b0 [ 2366.463355][ T7364] do_vfs_ioctl+0x770/0x1750 [ 2366.467934][ T7364] ? selinux_file_ioctl+0x73b/0x990 [ 2366.473112][ T7364] ? ioctl_preallocate+0x250/0x250 [ 2366.478205][ T7364] ? __fget+0x37c/0x3c0 [ 2366.482428][ T7364] ? vfs_write+0x427/0x4f0 [ 2366.486830][ T7364] ? fget_many+0x20/0x20 [ 2366.491052][ T7364] ? ksys_write+0x25d/0x2c0 [ 2366.495553][ T7364] ? file_open_root+0x450/0x450 [ 2366.500386][ T7364] ? security_file_ioctl+0xad/0xc0 [ 2366.505476][ T7364] __x64_sys_ioctl+0xd4/0x110 [ 2366.510135][ T7364] do_syscall_64+0xcb/0x150 [ 2366.514619][ T7364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.520489][ T7364] RIP: 0033:0x45d239 [ 2366.524373][ T7364] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2366.543976][ T7364] RSP: 002b:00007f66706e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2366.552379][ T7364] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2366.560343][ T7364] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000009 [ 2366.568294][ T7364] RBP: 00007f66706e9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.576242][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2366.584193][ T7364] R13: 00007ffc8a83e4ff R14: 00007f66706ea9c0 R15: 000000000118cf4c [ 2366.601202][ T7370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2366.609864][ T7345] kasan: CONFIG_KASAN_INLINE enabled [ 2366.619938][ T7345] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2366.628015][ T7345] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2366.634937][ T7345] CPU: 0 PID: 7345 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2366.644982][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2366.655046][ T7345] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2366.659700][ T700] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2366.660492][ T7345] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb ed 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 c5 be d9 [ 2366.660497][ T7345] RSP: 0018:ffff88816c7077e0 EFLAGS: 00010206 [ 2366.660505][ T7345] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2366.660509][ T7345] RDX: ffffc90002443000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2366.660522][ T7345] RBP: dffffc0000000000 R08: ffffffff817b504f R09: 0000000000000003 [ 2366.717530][ T7345] R10: ffffed102d8e0ee5 R11: 0000000000000004 R12: 0000000000000000 [ 2366.725484][ T7345] R13: dffffc0000000000 R14: 1ffff11022e0c822 R15: 1ffff11022e0c834 [ 2366.734397][ T7345] FS: 00007f07473a0700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2366.743311][ T7345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2366.749892][ T7345] CR2: 00007fea7b79c000 CR3: 000000016d610002 CR4: 00000000001606f0 [ 2366.757853][ T7345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2366.765815][ T7345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2366.773770][ T7345] Call Trace: [ 2366.777049][ T7345] ? dma_buf_fs_init_context+0x60/0x60 [ 2366.782503][ T7345] __dentry_kill+0x41b/0x5a0 [ 2366.787087][ T7345] dput+0x2e1/0x5e0 [ 2366.790886][ T7345] path_put+0x35/0x60 [ 2366.795025][ T7345] alloc_file_pseudo+0x2ac/0x340 [ 2366.799951][ T7345] ? alloc_empty_file_noaccount+0x70/0x70 [ 2366.805666][ T7345] ? alloc_anon_inode+0x213/0x2e0 [ 2366.810671][ T7345] ? memcpy+0x38/0x50 [ 2366.814643][ T7345] ? alloc_anon_inode+0x213/0x2e0 [ 2366.819650][ T7345] dma_buf_export+0x4e0/0x7b0 [ 2366.824310][ T7345] ion_dmabuf_alloc+0x199/0x230 [ 2366.829141][ T7345] ? track_buffer_created+0x1c0/0x1c0 [ 2366.834500][ T7345] ? check_stack_object+0x5a/0x90 [ 2366.839514][ T7345] ion_ioctl+0x2e8/0x9c0 [ 2366.843750][ T7345] ? get_pid_task+0x86/0x90 [ 2366.848239][ T7345] ? proc_fail_nth_write+0x18f/0x250 [ 2366.853505][ T7345] ? debug_shrink_set+0x1b0/0x1b0 [ 2366.858510][ T7345] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2366.863687][ T7345] ? memset+0x1f/0x40 [ 2366.867668][ T7345] ? fsnotify+0x13a0/0x1460 [ 2366.872150][ T7345] ? debug_shrink_set+0x1b0/0x1b0 [ 2366.877238][ T7345] do_vfs_ioctl+0x770/0x1750 [ 2366.881838][ T7345] ? selinux_file_ioctl+0x73b/0x990 [ 2366.887022][ T7345] ? ioctl_preallocate+0x250/0x250 [ 2366.892118][ T7345] ? __fget+0x37c/0x3c0 [ 2366.896274][ T7345] ? vfs_write+0x427/0x4f0 [ 2366.900694][ T7345] ? fget_many+0x20/0x20 [ 2366.904932][ T7345] ? ksys_write+0x25d/0x2c0 [ 2366.909423][ T7345] ? file_open_root+0x450/0x450 [ 2366.914258][ T7345] ? security_file_ioctl+0xad/0xc0 [ 2366.919349][ T7345] __x64_sys_ioctl+0xd4/0x110 [ 2366.924025][ T7345] do_syscall_64+0xcb/0x150 [ 2366.928521][ T7345] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.934401][ T7345] RIP: 0033:0x45d239 [ 2366.938277][ T7345] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2366.958053][ T7345] RSP: 002b:00007f074739fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2366.966445][ T7345] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 2366.974402][ T7345] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2366.982354][ T7345] RBP: 00007f074739fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.990339][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2366.998552][ T7345] R13: 00007fff9f84c7cf R14: 00007f07473a09c0 R15: 000000000118cf4c [ 2367.009548][ T7345] Modules linked in: [ 2367.024191][ T7345] ---[ end trace 4ca016cd7c6af1c6 ]--- [ 2367.033748][ T7345] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2367.040266][ T7345] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb ed 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 c5 be d9 [ 2367.061147][ T7345] RSP: 0018:ffff88816c7077e0 EFLAGS: 00010206 [ 2367.067551][ T7345] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2367.079572][ T7345] RDX: ffffc90002443000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2367.090741][ T700] usb 5-1: Using ep0 maxpacket: 16 [ 2367.091965][ T7345] RBP: dffffc0000000000 R08: ffffffff817b504f R09: 0000000000000003 [ 2367.104302][ T7345] R10: ffffed102d8e0ee5 R11: 0000000000000004 R12: 0000000000000000 [ 2367.112642][ T7345] R13: dffffc0000000000 R14: 1ffff11022e0c822 R15: 1ffff11022e0c834 [ 2367.129932][ T7345] FS: 00007f07473a0700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2367.138960][ T7345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2367.146800][ T7345] CR2: 000000000342b978 CR3: 000000016d610006 CR4: 00000000001606f0 [ 2367.154840][ T7345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2367.162923][ T7345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2367.171715][ T7345] Kernel panic - not syncing: Fatal exception [ 2367.178867][ T7345] Kernel Offset: disabled [ 2367.184641][ T7345] Rebooting in 86400 seconds..