0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 550.026690][ T2747] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 550.047238][ T2688] usb 3-1: Using ep0 maxpacket: 16 16:15:22 executing program 5: socket$inet6(0xa, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0xfffff807}) [ 550.076868][ T8292] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 550.167428][ T2688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.214180][ T2688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.266898][ T2688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 550.276853][ T2747] usb 5-1: Using ep0 maxpacket: 16 [ 550.326883][ T8292] usb 1-1: Using ep0 maxpacket: 16 [ 550.367723][ T2688] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 550.396946][ T2747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.398442][ T2688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 550.417720][ T2747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.446482][ T2688] usb 3-1: SerialNumber: syz [ 550.450525][ T2747] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 550.454676][ T2688] usb 3-1: config 0 descriptor?? [ 550.469567][ T8292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.497573][ T8292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.542528][ T8292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 550.577425][ T2747] usb 5-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 550.592539][ T2747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 550.612700][ T2747] usb 5-1: SerialNumber: syz [ 550.635775][ T2747] usb 5-1: config 0 descriptor?? [ 550.667064][ T8292] usb 1-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 550.676189][ T8292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 550.686737][ T8292] usb 1-1: SerialNumber: syz [ 550.706974][ T8292] usb 1-1: config 0 descriptor?? [ 551.299473][ T2688] usbhid 3-1:0.0: can't add hid device: -71 [ 551.305648][ T2688] usbhid: probe of 3-1:0.0 failed with error -71 [ 551.314950][ T2688] usb 3-1: USB disconnect, device number 64 [ 551.426882][ T2747] usbhid 5-1:0.0: can't add hid device: -71 [ 551.433062][ T2747] usbhid: probe of 5-1:0.0 failed with error -71 [ 551.450765][ T2747] usb 5-1: USB disconnect, device number 5 [ 551.467230][ T8292] usbhid 1-1:0.0: can't add hid device: -71 [ 551.473411][ T8292] usbhid: probe of 1-1:0.0 failed with error -71 [ 551.506700][ T144] tipc: TX() has been purged, node left! [ 551.517818][ T8292] usb 1-1: USB disconnect, device number 7 16:15:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) [ 551.676758][ T144] tipc: TX() has been purged, node left! 16:15:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:23 executing program 5: socket$inet6(0xa, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0xfffff807}) 16:15:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) clock_adjtime(0x0, &(0x7f00000003c0)={0xfffff807}) [ 551.840377][ T144] tipc: TX() has been purged, node left! 16:15:23 executing program 4 (fault-call:6 fault-nth:0): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:23 executing program 3: r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @random="7e9787477365"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'macsec0\x00', @broadcast}) 16:15:23 executing program 0 (fault-call:0 fault-nth:0): mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:23 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000), 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 552.006477][T17303] FAULT_INJECTION: forcing a failure. [ 552.006477][T17303] name failslab, interval 1, probability 0, space 0, times 1 [ 552.021202][T17302] device veth1_macvtap left promiscuous mode [ 552.044453][T17302] device macsec0 entered promiscuous mode [ 552.044470][T17307] FAULT_INJECTION: forcing a failure. [ 552.044470][T17307] name failslab, interval 1, probability 0, space 0, times 1 [ 552.044494][T17307] CPU: 1 PID: 17307 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 552.071680][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.072088][T17308] IPVS: ftp: loaded support on port[0] = 21 [ 552.081771][T17307] Call Trace: [ 552.081799][T17307] dump_stack+0x188/0x20d [ 552.081817][T17307] should_fail.cold+0x5/0xa [ 552.081833][T17307] ? lock_downgrade+0x840/0x840 [ 552.081847][T17307] ? fault_create_debugfs_attr+0x140/0x140 [ 552.081869][T17307] should_failslab+0x5/0xf [ 552.081883][T17307] kmem_cache_alloc+0x29b/0x740 [ 552.081899][T17307] ? find_held_lock+0x2d/0x110 [ 552.081920][T17307] getname_flags+0xd2/0x5b0 [ 552.129626][T17307] do_mq_open+0x19e/0x8c0 [ 552.133984][T17307] ? __do_notify+0x8f0/0x8f0 [ 552.138588][T17307] ? __might_fault+0x190/0x1d0 [ 552.143397][T17307] __ia32_compat_sys_mq_open+0x139/0x250 [ 552.149309][T17307] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 552.155045][T17307] ? __sb_end_write+0x101/0x1d0 [ 552.159918][T17307] ? fput_many+0x2f/0x1a0 [ 552.164271][T17307] ? trace_hardirqs_off_caller+0x55/0x230 [ 552.170013][T17307] do_fast_syscall_32+0x270/0xe90 [ 552.175222][T17307] entry_SYSENTER_compat+0x70/0x7f [ 552.181951][T17303] CPU: 0 PID: 17303 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 552.190743][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.200842][T17303] Call Trace: 16:15:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000), 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 552.204875][T17303] dump_stack+0x188/0x20d [ 552.209218][T17303] should_fail.cold+0x5/0xa [ 552.213731][T17303] ? lock_downgrade+0x840/0x840 [ 552.218684][T17303] ? fault_create_debugfs_attr+0x140/0x140 [ 552.224659][T17303] should_failslab+0x5/0xf [ 552.229096][T17303] kmem_cache_alloc_node+0x25c/0x760 [ 552.234675][T17303] __alloc_skb+0xba/0x5a0 [ 552.239032][T17303] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 552.244695][T17303] ? netlink_autobind.isra.0+0x21b/0x300 [ 552.250388][T17303] netlink_sendmsg+0x97b/0xe10 [ 552.255208][T17303] ? aa_af_perm+0x260/0x260 [ 552.259851][T17303] ? netlink_unicast+0x740/0x740 [ 552.264853][T17303] ? netlink_unicast+0x740/0x740 [ 552.269994][T17303] sock_sendmsg+0xcf/0x120 [ 552.274550][T17303] ____sys_sendmsg+0x6bf/0x7e0 [ 552.279375][T17303] ? get_compat_msghdr+0xd1/0x120 [ 552.284542][T17303] ? kernel_sendmsg+0x50/0x50 [ 552.289350][T17303] ? _kstrtoull+0x13f/0x1f0 [ 552.293911][T17303] ___sys_sendmsg+0x100/0x170 [ 552.298622][T17303] ? sendmsg_copy_msghdr+0x70/0x70 [ 552.303879][T17303] ? __fget_files+0x32f/0x500 [ 552.308585][T17303] ? ksys_dup3+0x3c0/0x3c0 [ 552.313332][T17303] ? __fget_light+0x20e/0x270 [ 552.318035][T17303] __sys_sendmsg+0xec/0x1b0 [ 552.322561][T17303] ? __sys_sendmsg_sock+0xb0/0xb0 [ 552.327608][T17303] ? vfs_write+0x161/0x5d0 [ 552.332057][T17303] ? trace_hardirqs_off_caller+0x55/0x230 [ 552.337805][T17303] ? do_fast_syscall_32+0xcc/0xe90 [ 552.342948][T17303] do_fast_syscall_32+0x270/0xe90 [ 552.348122][T17303] entry_SYSENTER_compat+0x70/0x7f 16:15:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000), 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 552.365604][ T2747] usb 3-1: new high-speed USB device number 65 using dummy_hcd 16:15:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 552.556918][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 552.626701][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 552.680871][T17309] FAULT_INJECTION: forcing a failure. [ 552.680871][T17309] name failslab, interval 1, probability 0, space 0, times 0 [ 552.700265][T17309] CPU: 1 PID: 17309 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 552.708976][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.719045][T17309] Call Trace: [ 552.722388][T17309] dump_stack+0x188/0x20d [ 552.727124][T17309] should_fail.cold+0x5/0xa [ 552.731922][T17309] ? fault_create_debugfs_attr+0x140/0x140 [ 552.737756][T17309] should_failslab+0x5/0xf [ 552.742185][T17309] __kmalloc+0x2d9/0x7a0 [ 552.746447][T17309] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 552.752450][T17309] ? tomoyo_realpath_from_path+0xc2/0x620 [ 552.758231][T17309] ? lock_release+0x800/0x800 [ 552.762921][T17309] ? __lock_acquire+0xcbb/0x4c50 [ 552.767896][T17309] tomoyo_realpath_from_path+0xc2/0x620 [ 552.773462][T17309] ? tomoyo_profile+0x42/0x50 [ 552.778162][T17309] tomoyo_path_number_perm+0x1c2/0x4d0 [ 552.783668][T17309] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 552.789493][T17309] ? tomoyo_execute_permission+0x470/0x470 [ 552.796030][T17309] ? __fget_files+0x30d/0x500 [ 552.800944][T17309] ? __fget_files+0x32f/0x500 [ 552.805639][T17309] ? ksys_dup3+0x3c0/0x3c0 [ 552.810100][T17309] ? fput_many+0x2f/0x1a0 [ 552.814490][T17309] security_file_ioctl+0x6c/0xb0 [ 552.819905][T17309] __ia32_compat_sys_ioctl+0xb6/0x2b0 [ 552.826198][T17309] do_fast_syscall_32+0x270/0xe90 [ 552.831260][T17309] entry_SYSENTER_compat+0x70/0x7f [ 552.847047][T17309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.888747][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.915780][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.955395][ T2747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 553.107312][ T2747] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 553.121247][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 553.138771][ T2747] usb 3-1: SerialNumber: syz [ 553.167476][ T2747] usb 3-1: config 0 descriptor?? [ 553.936792][ T2747] usbhid 3-1:0.0: can't add hid device: -71 [ 553.943528][ T2747] usbhid: probe of 3-1:0.0 failed with error -71 [ 553.967820][ T2747] usb 3-1: USB disconnect, device number 65 16:15:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 16:15:26 executing program 0 (fault-call:0 fault-nth:1): mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:26 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 554.419477][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 554.434233][T17360] FAULT_INJECTION: forcing a failure. [ 554.434233][T17360] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 554.449120][T17360] CPU: 1 PID: 17360 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 554.457905][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.468155][T17360] Call Trace: [ 554.471469][T17360] dump_stack+0x188/0x20d [ 554.475815][T17360] should_fail.cold+0x5/0xa [ 554.480334][T17360] ? fault_create_debugfs_attr+0x140/0x140 [ 554.486156][T17360] ? mark_held_locks+0xe0/0xe0 [ 554.490933][T17360] ? print_usage_bug+0x240/0x240 [ 554.496009][T17360] __alloc_pages_nodemask+0x17a/0x810 [ 554.501585][T17360] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 554.508356][T17360] ? find_held_lock+0x2d/0x110 [ 554.513657][T17360] ? lock_downgrade+0x840/0x840 [ 554.518536][T17360] cache_grow_begin+0x8c/0xc10 [ 554.524017][T17360] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 554.529509][T17360] kmem_cache_alloc+0x670/0x740 [ 554.534391][T17360] ? find_held_lock+0x2d/0x110 [ 554.539194][T17360] getname_flags+0xd2/0x5b0 [ 554.543708][T17360] do_mq_open+0x19e/0x8c0 [ 554.548068][T17360] ? __do_notify+0x8f0/0x8f0 [ 554.552788][T17360] ? __might_fault+0x190/0x1d0 [ 554.557561][T17360] __ia32_compat_sys_mq_open+0x139/0x250 [ 554.563465][T17360] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 554.569541][T17360] ? __sb_end_write+0x101/0x1d0 [ 554.574415][T17360] ? fput_many+0x2f/0x1a0 [ 554.579372][T17360] ? trace_hardirqs_off_caller+0x55/0x230 [ 554.585106][T17360] do_fast_syscall_32+0x270/0xe90 [ 554.590160][T17360] entry_SYSENTER_compat+0x70/0x7f [ 554.617481][T17363] FAULT_INJECTION: forcing a failure. [ 554.617481][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 554.648747][T17362] IPVS: ftp: loaded support on port[0] = 21 [ 554.698498][T17363] CPU: 1 PID: 17363 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 554.707241][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.718379][T17363] Call Trace: [ 554.721714][T17363] dump_stack+0x188/0x20d [ 554.726177][T17363] should_fail.cold+0x5/0xa [ 554.730734][T17363] ? fault_create_debugfs_attr+0x140/0x140 [ 554.737010][T17363] should_failslab+0x5/0xf [ 554.741449][T17363] __kmalloc+0x2d9/0x7a0 [ 554.748206][T17363] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 554.755332][T17363] ? tomoyo_realpath_from_path+0xc2/0x620 [ 554.762558][T17363] ? lock_release+0x800/0x800 [ 554.767247][T17363] ? __lock_acquire+0xcbb/0x4c50 [ 554.772229][T17363] tomoyo_realpath_from_path+0xc2/0x620 [ 554.780378][T17363] ? tomoyo_profile+0x42/0x50 [ 554.786899][T17363] tomoyo_path_number_perm+0x1c2/0x4d0 [ 554.794204][T17363] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 554.801775][T17363] ? tomoyo_execute_permission+0x470/0x470 [ 554.812850][T17363] ? __fget_files+0x30d/0x500 [ 554.817792][T17363] ? __fget_files+0x32f/0x500 [ 554.822536][T17363] ? ksys_dup3+0x3c0/0x3c0 [ 554.829250][T17363] ? fput_many+0x2f/0x1a0 [ 554.833622][T17363] security_file_ioctl+0x6c/0xb0 [ 554.838577][T17363] __ia32_compat_sys_ioctl+0xb6/0x2b0 16:15:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 554.844853][T17363] do_fast_syscall_32+0x270/0xe90 [ 554.850116][T17363] entry_SYSENTER_compat+0x70/0x7f 16:15:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 554.956753][ T2747] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 554.968844][T17363] ERROR: Out of memory at tomoyo_realpath_from_path. 16:15:27 executing program 0 (fault-call:0 fault-nth:2): mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:27 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 555.017901][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 16:15:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 555.168879][T17397] FAULT_INJECTION: forcing a failure. [ 555.168879][T17397] name failslab, interval 1, probability 0, space 0, times 0 [ 555.199883][T17399] FAULT_INJECTION: forcing a failure. [ 555.199883][T17399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.213129][T17399] CPU: 0 PID: 17399 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 555.221811][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.231900][T17399] Call Trace: [ 555.235253][T17399] dump_stack+0x188/0x20d [ 555.239647][T17399] should_fail.cold+0x5/0xa [ 555.244171][T17399] ? fault_create_debugfs_attr+0x140/0x140 [ 555.250004][T17399] __alloc_pages_nodemask+0x17a/0x810 [ 555.255427][T17399] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 555.262207][T17399] ? mark_held_locks+0xe0/0xe0 [ 555.266979][T17399] ? mark_held_locks+0xe0/0xe0 [ 555.271753][T17399] ? find_held_lock+0x2d/0x110 [ 555.276652][T17399] cache_grow_begin+0x8c/0xc10 [ 555.281439][T17399] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 555.286914][T17399] __kmalloc+0x6dc/0x7a0 [ 555.291183][T17399] ? tomoyo_realpath_from_path+0xc2/0x620 [ 555.296956][T17399] ? lock_release+0x800/0x800 [ 555.301648][T17399] ? __lock_acquire+0xcbb/0x4c50 [ 555.306606][T17399] tomoyo_realpath_from_path+0xc2/0x620 [ 555.312197][T17399] ? tomoyo_profile+0x42/0x50 [ 555.316895][T17399] tomoyo_path_number_perm+0x1c2/0x4d0 [ 555.322366][T17399] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 555.328017][T17399] ? tomoyo_execute_permission+0x470/0x470 [ 555.333885][T17399] ? __fget_files+0x30d/0x500 [ 555.338599][T17399] ? __fget_files+0x32f/0x500 [ 555.343297][T17399] ? ksys_dup3+0x3c0/0x3c0 [ 555.347750][T17399] ? fput_many+0x2f/0x1a0 [ 555.352122][T17399] security_file_ioctl+0x6c/0xb0 [ 555.358383][T17399] __ia32_compat_sys_ioctl+0xb6/0x2b0 [ 555.363777][T17399] do_fast_syscall_32+0x270/0xe90 [ 555.368824][T17399] entry_SYSENTER_compat+0x70/0x7f [ 555.375540][T17397] CPU: 1 PID: 17397 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 555.384246][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.386815][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 555.395035][T17397] Call Trace: [ 555.395080][T17397] dump_stack+0x188/0x20d [ 555.395108][T17397] should_fail.cold+0x5/0xa [ 555.395131][T17397] ? fault_create_debugfs_attr+0x140/0x140 [ 555.421669][T17397] should_failslab+0x5/0xf [ 555.426121][T17397] kmem_cache_alloc+0x29b/0x740 [ 555.430988][T17397] ? lock_downgrade+0x840/0x840 [ 555.435882][T17397] ? print_usage_bug+0x240/0x240 [ 555.440837][T17397] __d_alloc+0x2b/0x8e0 [ 555.445043][T17397] d_alloc+0x4a/0x240 [ 555.449830][T17397] d_alloc_parallel+0xe8/0x1b10 [ 555.454735][T17397] ? __lock_acquire+0x2184/0x4c50 [ 555.460315][T17397] ? __d_lookup_rcu+0x6c0/0x6c0 [ 555.465187][T17397] ? lockdep_init_map_waits+0x26a/0x890 [ 555.470861][T17397] ? lockdep_init_map_waits+0x26a/0x890 [ 555.476419][T17397] ? __raw_spin_lock_init+0x34/0x100 [ 555.481742][T17397] __lookup_slow+0x193/0x490 [ 555.486350][T17397] ? vfs_rmdir+0x500/0x500 [ 555.490771][T17397] ? print_usage_bug+0x240/0x240 [ 555.495740][T17397] ? d_lookup+0x18f/0x250 [ 555.500116][T17397] lookup_one_len+0x163/0x190 [ 555.504813][T17397] ? __lookup_slow+0x490/0x490 [ 555.509593][T17397] ? __down_timeout+0x2d0/0x2d0 [ 555.514986][T17397] ? __mnt_want_write+0x1da/0x2c0 [ 555.520168][T17397] do_mq_open+0x25c/0x8c0 [ 555.524518][T17397] ? __do_notify+0x8f0/0x8f0 [ 555.529125][T17397] ? __might_fault+0x190/0x1d0 [ 555.533903][T17397] __ia32_compat_sys_mq_open+0x139/0x250 [ 555.539543][T17397] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 555.545103][T17397] ? __sb_end_write+0x101/0x1d0 [ 555.550162][T17397] ? fput_many+0x2f/0x1a0 [ 555.554534][T17397] ? trace_hardirqs_off_caller+0x55/0x230 [ 555.557357][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.560276][T17397] do_fast_syscall_32+0x270/0xe90 [ 555.576172][T17397] entry_SYSENTER_compat+0x70/0x7f [ 555.603301][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.656841][ T2747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 555.757448][ T2747] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 555.771192][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 555.789088][ T2747] usb 3-1: SerialNumber: syz [ 555.810511][ T2747] usb 3-1: config 0 descriptor?? [ 556.576834][ T2747] usbhid 3-1:0.0: can't add hid device: -71 [ 556.582926][ T2747] usbhid: probe of 3-1:0.0 failed with error -71 [ 556.601606][ T2747] usb 3-1: USB disconnect, device number 66 16:15:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0) 16:15:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:29 executing program 3 (fault-call:3 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 16:15:29 executing program 0 (fault-call:0 fault-nth:3): mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 557.030872][T17434] FAULT_INJECTION: forcing a failure. [ 557.030872][T17434] name failslab, interval 1, probability 0, space 0, times 0 [ 557.070094][T17436] FAULT_INJECTION: forcing a failure. [ 557.070094][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 557.075282][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 557.096497][T17434] CPU: 0 PID: 17434 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 557.105221][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.115294][T17434] Call Trace: [ 557.118604][T17434] dump_stack+0x188/0x20d [ 557.122952][T17434] should_fail.cold+0x5/0xa [ 557.127474][T17434] ? fault_create_debugfs_attr+0x140/0x140 [ 557.133319][T17434] ? mqueue_free_inode+0x20/0x20 [ 557.138269][T17434] should_failslab+0x5/0xf [ 557.142698][T17434] kmem_cache_alloc+0x29b/0x740 [ 557.147560][T17434] ? find_held_lock+0x2d/0x110 [ 557.152338][T17434] ? mqueue_free_inode+0x20/0x20 [ 557.157299][T17434] mqueue_alloc_inode+0x18/0x40 [ 557.162246][T17434] ? mqueue_free_inode+0x20/0x20 [ 557.167198][T17434] alloc_inode+0x61/0x1e0 [ 557.171551][T17434] new_inode_pseudo+0x14/0xe0 [ 557.176257][T17434] new_inode+0x1b/0x40 [ 557.180357][T17434] mqueue_get_inode+0x8f/0xe00 [ 557.185238][T17434] mqueue_create_attr+0x25a/0x4c0 [ 557.190287][T17434] vfs_mkobj+0x32d/0x540 [ 557.194529][T17434] ? mq_create_mount+0x300/0x300 [ 557.199477][T17434] do_mq_open+0x65a/0x8c0 [ 557.203830][T17434] ? __do_notify+0x8f0/0x8f0 [ 557.208438][T17434] ? __might_fault+0x190/0x1d0 [ 557.213211][T17434] __ia32_compat_sys_mq_open+0x139/0x250 [ 557.218849][T17434] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 557.224402][T17434] ? __sb_end_write+0x101/0x1d0 [ 557.229257][T17434] ? fput_many+0x2f/0x1a0 [ 557.233596][T17434] ? trace_hardirqs_off_caller+0x55/0x230 [ 557.239332][T17434] do_fast_syscall_32+0x270/0xe90 [ 557.244365][T17434] entry_SYSENTER_compat+0x70/0x7f [ 557.254706][T17436] CPU: 1 PID: 17436 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 557.263413][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.273475][T17436] Call Trace: [ 557.276792][T17436] dump_stack+0x188/0x20d [ 557.281144][T17436] should_fail.cold+0x5/0xa [ 557.285672][T17436] ? fault_create_debugfs_attr+0x140/0x140 [ 557.291602][T17436] should_failslab+0x5/0xf [ 557.296137][T17436] __kmalloc+0x2d9/0x7a0 [ 557.300762][T17436] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 557.306154][T17436] ? d_absolute_path+0x10c/0x160 [ 557.311212][T17436] ? __d_path+0x140/0x140 [ 557.315570][T17436] tomoyo_encode2.part.0+0xec/0x3b0 [ 557.321857][T17436] tomoyo_encode+0x28/0x50 [ 557.326315][T17436] tomoyo_realpath_from_path+0x184/0x620 [ 557.332963][T17436] tomoyo_path_number_perm+0x1c2/0x4d0 [ 557.338434][T17436] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 557.344086][T17436] ? tomoyo_execute_permission+0x470/0x470 [ 557.350096][T17436] ? __fget_files+0x30d/0x500 [ 557.354816][T17436] ? __fget_files+0x32f/0x500 [ 557.359512][T17436] ? ksys_dup3+0x3c0/0x3c0 [ 557.363942][T17436] ? fput_many+0x2f/0x1a0 [ 557.368287][T17436] security_file_ioctl+0x6c/0xb0 [ 557.373255][T17436] __ia32_compat_sys_ioctl+0xb6/0x2b0 [ 557.378646][T17436] do_fast_syscall_32+0x270/0xe90 [ 557.383765][T17436] entry_SYSENTER_compat+0x70/0x7f [ 557.408647][T17436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.550933][ T9670] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 557.806764][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 557.956880][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.967903][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.979756][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.066852][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 558.076285][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 558.106671][ T9670] usb 3-1: SerialNumber: syz [ 558.114617][ T9670] usb 3-1: config 0 descriptor?? [ 558.899069][ T9670] usbhid 3-1:0.0: can't add hid device: -71 [ 558.905676][ T9670] usbhid: probe of 3-1:0.0 failed with error -71 [ 558.915183][ T9670] usb 3-1: USB disconnect, device number 67 16:15:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 16:15:31 executing program 0 (fault-call:0 fault-nth:4): mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:31 executing program 3 (fault-call:3 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x2, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 559.190842][T17470] FAULT_INJECTION: forcing a failure. [ 559.190842][T17470] name failslab, interval 1, probability 0, space 0, times 0 [ 559.209722][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 559.236100][T17470] CPU: 0 PID: 17470 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 559.244842][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.254913][T17470] Call Trace: [ 559.258250][T17470] dump_stack+0x188/0x20d [ 559.262612][T17470] should_fail.cold+0x5/0xa [ 559.267169][T17470] ? lock_downgrade+0x840/0x840 [ 559.272033][T17470] ? fault_create_debugfs_attr+0x140/0x140 [ 559.277869][T17470] should_failslab+0x5/0xf [ 559.282315][T17470] kmem_cache_alloc_trace+0x2d0/0x7d0 16:15:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x799}, 0x8) close(r0) [ 559.287728][T17470] ? rwlock_bug.part.0+0x90/0x90 [ 559.292780][T17470] ? binder_thread_read+0x3bd0/0x3bd0 [ 559.298169][T17470] binder_get_thread+0x1d8/0x7c0 [ 559.303124][T17470] ? binder_thread_read+0x3bd0/0x3bd0 [ 559.308511][T17470] ? binder_thread_read+0x3bd0/0x3bd0 [ 559.313905][T17470] binder_ioctl+0x1ea/0x1862 [ 559.318519][T17470] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 559.323000][T17475] IPVS: ftp: loaded support on port[0] = 21 [ 559.324427][T17470] ? binder_thread_read+0x3bd0/0x3bd0 [ 559.324442][T17470] ? do_vfs_ioctl+0x50c/0x1360 [ 559.324459][T17470] ? ioctl_file_clone+0x180/0x180 [ 559.324482][T17470] ? __fget_files+0x32f/0x500 [ 559.350486][T17470] ? ksys_dup3+0x3c0/0x3c0 [ 559.355147][T17470] ? fput_many+0x2f/0x1a0 [ 559.359527][T17470] ? binder_thread_read+0x3bd0/0x3bd0 [ 559.364936][T17470] compat_ptr_ioctl+0x67/0x90 [ 559.369633][T17470] ? fiemap_check_flags+0x70/0x70 [ 559.374679][T17470] __ia32_compat_sys_ioctl+0x23d/0x2b0 [ 559.380163][T17470] do_fast_syscall_32+0x270/0xe90 [ 559.385233][T17470] entry_SYSENTER_compat+0x70/0x7f 16:15:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0) 16:15:31 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 559.471275][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x799}, 0x8) close(r0) [ 559.547085][T17470] binder: 17466:17470 ioctl c0306201 200000c0 returned -12 16:15:31 executing program 0: mq_open(&(0x7f0000000780)='.selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:31 executing program 3 (fault-call:3 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 559.683186][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x799}, 0x8) close(r0) 16:15:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 559.866868][ T5] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 559.910759][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 560.102403][T17475] IPVS: ftp: loaded support on port[0] = 21 [ 560.126560][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 560.247451][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.278882][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.315960][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.427613][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 560.442546][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 560.468398][ T5] usb 3-1: SerialNumber: syz [ 560.487352][ T5] usb 3-1: config 0 descriptor?? 16:15:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x10, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:32 executing program 0: mq_open(&(0x7f0000000780)='/selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 560.825185][T17558] IPVS: ftp: loaded support on port[0] = 21 [ 561.118865][T17558] IPVS: ftp: loaded support on port[0] = 21 [ 561.257016][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 561.263130][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 561.297936][ T5] usb 3-1: USB disconnect, device number 68 16:15:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0) 16:15:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) close(r0) 16:15:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x2, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:33 executing program 0: mq_open(&(0x7f0000000780)='&/elinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x1276, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 561.805685][T17615] IPVS: ftp: loaded support on port[0] = 21 [ 561.805784][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x94, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:33 executing program 0: mq_open(&(0x7f0000000780)='&s/linuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) close(r0) 16:15:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x10, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:34 executing program 0: mq_open(&(0x7f0000000780)='&se/inuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xb4, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 562.032829][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 562.120377][T17649] binder: 17640:17649 ioctl 10 200000c0 returned -22 [ 562.169858][ T2688] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 562.201039][T17658] binder: 17640:17658 ioctl 10 200000c0 returned -22 [ 562.466849][ T2688] usb 3-1: Using ep0 maxpacket: 16 [ 562.471496][T17615] IPVS: ftp: loaded support on port[0] = 21 [ 562.587591][ T2688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.626704][ T2688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.649811][ T2688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.776856][ T2688] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 562.785926][ T2688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 562.806753][ T2688] usb 3-1: SerialNumber: syz [ 562.831237][ T2688] usb 3-1: config 0 descriptor?? [ 563.406822][ T144] tipc: TX() has been purged, node left! [ 563.567009][ T144] tipc: TX() has been purged, node left! [ 563.586833][ T2688] usbhid 3-1:0.0: can't add hid device: -71 [ 563.593039][ T2688] usbhid: probe of 3-1:0.0 failed with error -71 [ 563.617601][ T2688] usb 3-1: USB disconnect, device number 69 [ 563.746868][ T144] tipc: TX() has been purged, node left! [ 563.906801][ T144] tipc: TX() has been purged, node left! 16:15:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c2"], 0x0}, 0x0) 16:15:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1}, 0x8) close(r0) 16:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:36 executing program 0: mq_open(&(0x7f0000000780)='&sel/nuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4c01, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4b64, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:36 executing program 0: mq_open(&(0x7f0000000780)='&seli/uxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 564.049882][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(0xffffffffffffffff) [ 564.095075][T17705] binder: 17701:17705 ioctl 4c01 200000c0 returned -22 [ 564.127428][T17705] binder: 17701:17705 ioctl 4c01 200000c0 returned -22 [ 564.139973][T17704] IPVS: ftp: loaded support on port[0] = 21 16:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x2c2, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x541b, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 564.234691][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:36 executing program 0: mq_open(&(0x7f0000000780)='&selin/xbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(0xffffffffffffffff) [ 564.362219][T17732] binder: 17725:17732 ioctl 541b 200000c0 returned -22 [ 564.427907][T17732] binder: 17725:17732 ioctl 541b 200000c0 returned -22 [ 564.456815][ T9670] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 564.479994][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 564.668874][T17704] IPVS: ftp: loaded support on port[0] = 21 [ 564.706847][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 564.837320][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.858492][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.872271][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 564.977442][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 564.986574][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 564.995101][ T9670] usb 3-1: SerialNumber: syz [ 565.001421][ T9670] usb 3-1: config 0 descriptor?? [ 565.711309][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.718843][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.726256][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.734490][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.742360][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.750220][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.758042][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.765452][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.773513][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.781315][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.789350][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.797082][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.804486][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.812609][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.820484][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.828341][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.835825][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.843771][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.855601][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.863479][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.871732][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.879621][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.887840][ T9670] hid-generic 0003:045E:87F5.0008: unknown main item tag 0x0 [ 565.899747][ T9670] hid-generic 0003:045E:87F5.0008: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 565.922663][ T9670] usb 3-1: USB disconnect, device number 70 16:15:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c2"], 0x0}, 0x0) 16:15:38 executing program 0: mq_open(&(0x7f0000000780)='&selinu/bdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(0xffffffffffffffff) 16:15:38 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4c01, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:38 executing program 0: mq_open(&(0x7f0000000780)='&selinux/dev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 566.486322][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c2"], 0x0}, 0x0) [ 566.529285][T17802] IPVS: ftp: loaded support on port[0] = 21 16:15:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5450, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:38 executing program 0: mq_open(&(0x7f0000000780)='&selinuxb/ev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 566.856941][ T9670] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 566.976933][ T2747] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 567.116867][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 567.165412][T17802] IPVS: ftp: loaded support on port[0] = 21 [ 567.216755][ T2747] usb 2-1: Using ep0 maxpacket: 16 [ 567.247573][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.263827][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.273885][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.337474][ T2747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.355950][ T2747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.378421][ T2747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.397434][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 567.406483][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 567.436740][ T9670] usb 3-1: SerialNumber: syz [ 567.442624][ T9670] usb 3-1: config 0 descriptor?? [ 567.477497][ T2747] usb 2-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 567.491615][ T2747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 567.505563][ T2747] usb 2-1: SerialNumber: syz [ 567.525421][ T2747] usb 2-1: config 0 descriptor?? [ 568.179122][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.186582][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.204857][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.217657][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.225068][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.228962][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.232682][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.248034][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.255447][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.261200][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.262915][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.277843][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.285253][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.291132][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.292703][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.307645][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.315142][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.320436][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.322591][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.337645][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.345158][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.352681][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.353173][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.368167][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.375746][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.385028][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.388925][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.400713][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.406924][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.409304][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.417051][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.423481][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.449484][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.464877][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.465261][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.483311][ T9670] hid-generic 0003:045E:87F5.0009: unknown main item tag 0x0 [ 568.483948][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.500249][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.508179][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.515800][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.524055][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.527883][ T9670] hid-generic 0003:045E:87F5.0009: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 568.532056][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.551460][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.559632][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.575286][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.577604][ T9670] usb 3-1: USB disconnect, device number 71 [ 568.584390][ T2747] hid-generic 0003:045E:87F5.000A: unknown main item tag 0x0 [ 568.620896][ T2747] hid-generic 0003:045E:87F5.000A: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.1-1/input0 [ 568.645349][ T2747] usb 2-1: USB disconnect, device number 2 16:15:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c2"], 0x0}, 0x0) 16:15:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5451, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:40 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbd/v-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5411, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x1900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:41 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbde/-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 569.012333][T17913] IPVS: ftp: loaded support on port[0] = 21 16:15:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5452, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:41 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev/\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5460, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 569.316842][ T9670] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 569.556781][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 569.632934][T17913] IPVS: ftp: loaded support on port[0] = 21 [ 569.706308][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.727446][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.751708][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.856983][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 569.866054][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 569.875428][ T9670] usb 3-1: SerialNumber: syz [ 569.888181][ T9670] usb 3-1: config 0 descriptor?? [ 570.593400][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.600922][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.608568][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.615978][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.623836][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.631959][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.639867][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.647682][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.655084][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.663045][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.671143][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.679053][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.686466][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.694501][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.702290][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.710095][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.718109][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.725565][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.733537][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.741608][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.753602][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.761420][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.769432][ T9670] hid-generic 0003:045E:87F5.000B: unknown main item tag 0x0 [ 570.783011][ T9670] hid-generic 0003:045E:87F5.000B: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 570.800215][ T9670] usb 3-1: USB disconnect, device number 72 16:15:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a"], 0x0}, 0x0) 16:15:43 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5501, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:43 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x02', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:43 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x541b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:43 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x03', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 571.388544][T18012] binder: 18005:18012 ioctl 5501 200000c0 returned -22 [ 571.396338][T18011] IPVS: ftp: loaded support on port[0] = 21 [ 571.410282][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 571.426721][T18013] FAULT_INJECTION: forcing a failure. 16:15:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 571.426721][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 571.450174][T18016] binder: 18005:18016 ioctl 5501 200000c0 returned -22 [ 571.510039][T18013] CPU: 0 PID: 18013 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 571.518759][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.528827][T18013] Call Trace: [ 571.532137][T18013] dump_stack+0x188/0x20d [ 571.536508][T18013] should_fail.cold+0x5/0xa [ 571.541051][T18013] ? fault_create_debugfs_attr+0x140/0x140 [ 571.546898][T18013] should_failslab+0x5/0xf [ 571.551317][T18013] kmem_cache_alloc_node+0x25c/0x760 [ 571.556606][T18013] ? inet_sk_state_store+0xc6/0x3c0 [ 571.561834][T18013] __alloc_skb+0xba/0x5a0 [ 571.566174][T18013] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 571.571826][T18013] tcp_send_fin+0x1c8/0xce0 [ 571.576354][T18013] tcp_close+0xbf4/0x1250 [ 571.580686][T18013] ? ip_mc_drop_socket+0x16/0x260 [ 571.585730][T18013] ? __sock_release+0x280/0x280 [ 571.590582][T18013] inet_release+0xe4/0x1f0 [ 571.595056][T18013] inet6_release+0x4c/0x70 [ 571.599489][T18013] __sock_release+0xcd/0x280 [ 571.604094][T18013] sock_close+0x18/0x20 [ 571.608256][T18013] __fput+0x33e/0x880 [ 571.612247][T18013] task_work_run+0xf4/0x1b0 [ 571.616761][T18013] exit_to_usermode_loop+0x2fa/0x360 [ 571.622066][T18013] do_fast_syscall_32+0xbef/0xe90 [ 571.627112][T18013] entry_SYSENTER_compat+0x70/0x7f 16:15:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x5509, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:43 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x04', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x9400, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 571.787087][ T9670] usb 3-1: new high-speed USB device number 73 using dummy_hcd 16:15:43 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 571.857968][T18048] binder: 18046:18048 ioctl 5509 200000c0 returned -22 [ 571.897490][T18048] binder: 18046:18048 ioctl 5509 200000c0 returned -22 [ 572.036980][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 572.167132][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.184818][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.208923][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.233672][T18011] IPVS: ftp: loaded support on port[0] = 21 [ 572.346933][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 572.360992][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 572.380406][ T9670] usb 3-1: SerialNumber: syz [ 572.400821][ T9670] usb 3-1: config 0 descriptor?? [ 573.089065][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.096533][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.116938][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.124420][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.143324][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.157566][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.164973][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.183998][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.197241][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.204645][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.224276][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.237586][ T9670] hid-generic 0003:045E:87F5.000C: unknown main item tag 0x0 [ 573.255471][ T9670] hid-generic 0003:045E:87F5.000C: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 573.293257][ T9670] usb 3-1: USB disconnect, device number 73 16:15:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a"], 0x0}, 0x0) 16:15:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x6364, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xb400, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:45 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5421, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 573.920268][T18104] binder: 18098:18104 ioctl 6364 200000c0 returned -22 [ 573.936007][T18103] IPVS: ftp: loaded support on port[0] = 21 16:15:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xc202, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:46 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 574.024179][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x8912, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = memfd_create(&(0x7f0000000080)='trusted\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="8ff41ba2e9ab0a59"}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:46 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 574.251697][T18130] binder: 18126:18130 ioctl 8912 200000c0 returned -22 [ 574.276924][ T9721] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 574.320693][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 574.335689][T18140] binder: 18126:18140 ioctl 8912 200000c0 returned -22 [ 574.516952][ T9721] usb 3-1: Using ep0 maxpacket: 16 [ 574.638985][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.667110][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.712618][ T9721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 574.802986][T18103] IPVS: ftp: loaded support on port[0] = 21 [ 574.847544][ T9721] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 574.864589][ T9721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 574.917213][ T9721] usb 3-1: SerialNumber: syz [ 574.949605][ T9721] usb 3-1: config 0 descriptor?? [ 575.449354][ T144] tipc: TX() has been purged, node left! [ 575.607042][ T144] tipc: TX() has been purged, node left! [ 575.679236][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.686682][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.694597][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.702443][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.710307][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.718166][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.725589][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.733552][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.741520][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.749344][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.757210][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.764629][ T9721] hid-generic 0003:045E:87F5.000D: unknown main item tag 0x0 [ 575.774328][ T9721] hid-generic 0003:045E:87F5.000D: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 575.806852][ T144] tipc: TX() has been purged, node left! [ 575.889779][ T17] usb 3-1: USB disconnect, device number 74 [ 575.977667][ T144] tipc: TX() has been purged, node left! [ 576.146934][ T144] tipc: TX() has been purged, node left! [ 576.337178][ T144] tipc: TX() has been purged, node left! 16:15:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a"], 0x0}, 0x0) 16:15:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000080)={0x80000001, "dfb7366511a055143334d2984004fcab5930d4e01ba2097b382ddb164d5e4618", 0x3, 0x20, 0x8, 0x3, 0x4, 0x4, 0xff, 0x8}) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e22, @empty}}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x891c, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:48 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5450, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 576.452720][T18205] IPVS: ftp: loaded support on port[0] = 21 [ 576.498244][ T144] tipc: TX() has been purged, node left! [ 576.501538][T18207] vivid-003: disconnect [ 576.509122][ T144] tipc: TX() has been purged, node left! [ 576.515641][T18209] binder: 18201:18209 ioctl 891c 200000c0 returned -22 16:15:48 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 576.548832][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 576.563369][T18209] binder: 18201:18209 ioctl 891c 200000c0 returned -22 [ 576.578288][T18203] vivid-003: reconnect [ 576.590499][T18207] vivid-003: disconnect 16:15:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x8933, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 576.611346][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 576.637759][T18203] vivid-003: reconnect [ 576.964313][T18245] binder: 18239:18245 ioctl 8933 200000c0 returned -22 16:15:49 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 577.007698][T18205] IPVS: ftp: loaded support on port[0] = 21 [ 577.022713][T18245] binder: 18239:18245 ioctl 8933 200000c0 returned -22 16:15:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 577.247443][T18182] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 577.486946][T18182] usb 3-1: Using ep0 maxpacket: 16 [ 577.617032][T18182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.630019][T18182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.641093][T18182] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.727057][T18182] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 577.736264][T18182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 577.745578][T18182] usb 3-1: SerialNumber: syz [ 577.754479][T18182] usb 3-1: config 0 descriptor?? [ 578.459098][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.467322][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.475607][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.496875][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.505912][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.513570][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.522273][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.531072][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.539914][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.548595][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.557493][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.566046][T18182] hid-generic 0003:045E:87F5.000E: unknown main item tag 0x0 [ 578.580861][T18182] hid-generic 0003:045E:87F5.000E: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 578.667139][T15078] usb 3-1: USB disconnect, device number 75 16:15:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xae01, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x4) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5451, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a90001709"], 0x0}, 0x0) [ 579.224218][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 579.247737][T18311] binder: 18308:18311 ioctl ae01 200000c0 returned -22 [ 579.259547][T18312] IPVS: ftp: loaded support on port[0] = 21 16:15:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 579.278034][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket(0x15, 0x5, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) write$sndseq(r3, &(0x7f0000000200)=[{0x8, 0x3, 0x18, 0x4, @time={0x4, 0x732015e8}, {0x7f, 0x4}, {0x6, 0x9}, @note={0xfb, 0x4c, 0x6e, 0x4, 0x5}}, {0x37, 0x2, 0x0, 0x6c, @time={0x7, 0x2}, {0x4, 0x94}, {0x5, 0x7c}, @raw8={"604201f9a5d575dc842598a6"}}, {0x1f, 0x7, 0x81, 0x1, @time={0x9f6, 0x4cf}, {0x7, 0x3f}, {0x82, 0x7}, @quote={{0x7, 0x9b}, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0x81, 0x32, @tick, {0x7, 0x8}, {0x2, 0x1f}, @note={0x7, 0x81, 0x80, 0x6, 0x9}}}}, {0x5, 0x5, 0x8, 0x6, @time={0xfffffffc, 0x200}, {0xe7, 0xfc}, {0x2, 0x20}, @queue={0x80, {0x8, 0xfc9}}}, {0x8, 0x3, 0x2, 0x3a, @time={0x1, 0x9}, {0x2, 0x20}, {0x6a, 0x5}, @addr={0xff, 0x1}}, {0x1, 0xfe, 0x1, 0x1, @time={0x6, 0x395}, {0x4, 0x7f}, {0x3f, 0xf1}, @raw8={"d1843a0765486bc2b20f53f7"}}], 0xa8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xdbb7, @ipv4={[], [], @multicast2}, 0x2}, 0x1c) [ 579.327272][T18311] binder: 18308:18311 ioctl ae01 200000c0 returned -22 16:15:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xae41, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 579.429752][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 579.475287][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 579.576933][ T9721] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 579.597423][T18352] binder: 18351:18352 ioctl ae41 200000c0 returned -22 [ 579.633951][T18352] binder: 18351:18352 ioctl ae41 200000c0 returned -22 16:15:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77b}]}, 0x34}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d6}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="abe726bd7000fbdbdf250724a8af9b1acd17d8b333f7"], 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x4000080) 16:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xae60, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 579.787387][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 579.827107][ T9721] usb 3-1: Using ep0 maxpacket: 16 [ 579.868696][T18366] binder: 18362:18366 ioctl ae60 200000c0 returned -22 [ 579.889620][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 579.921248][T18366] binder: 18362:18366 ioctl ae60 200000c0 returned -22 [ 579.957770][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.993844][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.048281][ T9721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.104798][T18312] IPVS: ftp: loaded support on port[0] = 21 [ 580.147612][ T9721] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 580.183104][ T9721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 580.214489][ T9721] usb 3-1: SerialNumber: syz [ 580.239308][ T9721] usb 3-1: config 0 descriptor?? [ 580.929330][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.937876][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.946495][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.956135][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.963930][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.973289][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.982066][ T9721] hid-generic 0003:045E:87F5.000F: unknown main item tag 0x0 [ 580.992913][ T9721] hid-generic 0003:045E:87F5.000F: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 581.137405][ T9720] usb 3-1: USB disconnect, device number 76 16:15:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a90001709"], 0x0}, 0x0) 16:15:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:53 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xae80, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa2092a, 0x8, [], @ptr=0x7}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000240)) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x800c4153, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[&(0x7f0000000080)="32eea316453fe2c5178df8865ffd7911b901305b3cfeb86d5e721d78a228da254f1cb210752cc17107f533d47a56585a2b7e0b10ea764607b9a2f520a3734b3482f2015ecfd1d0c68a1ce7b0a7799974af398ca0730313be107c545c2d018bc51b2c43c0473cc414ffc9843c902ab3352ec8377b2322861d5c0cdd408d1095b7d4e44d5a516a5ef366b37ff5db20751221d9fe4c6ff014885bb92298393d49dfd4296d6fa1cdf9db50dccc9fed91c3177e337d5bf4fcc0dc52363c90f6cfdf9d57464454277c00c9be9f5507dd097e253b92169d8e20af2208cff15513a6ec6421e30abf26a5809a3a2ceada6af386"]}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:53 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5452, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:53 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 581.696073][T18421] IPVS: ftp: loaded support on port[0] = 21 [ 581.743044][T18424] binder: 18419:18424 ioctl ae80 200000c0 returned -22 16:15:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x19000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 581.800594][T18433] binder: 18419:18433 ioctl ae80 200000c0 returned -22 16:15:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r3, 0xffffffffffffffaa, &(0x7f0000000180)) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r5 = openat$mice(0xffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x141000) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x44}, 0x8}, 0x1c) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0086426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000100)={r6, 0x1}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x20001, 0x80000000}, 0x8) r7 = openat$sequencer2(0xffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x240000, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000001c0)) close(r0) 16:15:53 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x400454ca, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 582.008995][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 582.054943][T18466] binder: 18464:18466 ioctl 400454ca 200000c0 returned -22 [ 582.106694][T18466] binder: 18464:18466 ioctl 400454ca 200000c0 returned -22 [ 582.137167][ T8292] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 582.156204][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 582.391690][T18421] IPVS: ftp: loaded support on port[0] = 21 [ 582.417239][ T8292] usb 3-1: Using ep0 maxpacket: 16 [ 582.547092][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.558540][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.569254][ T8292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 582.677961][ T8292] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 582.687275][ T8292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 582.696473][ T8292] usb 3-1: SerialNumber: syz [ 582.707973][ T8292] usb 3-1: config 0 descriptor?? [ 583.409291][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.417832][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.426525][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.446925][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.455999][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.464316][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.472609][ T8292] hid-generic 0003:045E:87F5.0010: unknown main item tag 0x0 [ 583.482643][ T8292] hid-generic 0003:045E:87F5.0010: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 583.615911][ T8292] usb 3-1: USB disconnect, device number 77 16:15:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a90001709"], 0x0}, 0x0) 16:15:56 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4004550a, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x8b, "11fc4aa76e472c35bf97062004ef38615f98bdefa66aa9c173872bf254178a31c64e267feba7eaab8e602ec29548462d597a59fd9da121e4f2056cdfe549f9a38e1f6576a8eb05294060a084738e3bd0684f07f6e3d3370fea0990fdea91a04d62f61638c44a7ad2305137eda6db7ef1171be1284bafb28b5efd16d32f984b6fa246553e8e0063e9b55c33"}, &(0x7f0000000100)=0xaf) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) read$midi(r3, &(0x7f0000000300)=""/163, 0xa3) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) bind(r0, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x40, 0x5, 0x7f}, 0x80) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x5460, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:15:56 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x2, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 584.186287][T18523] IPVS: ftp: loaded support on port[0] = 21 [ 584.203642][T18518] binder: 18516:18518 ioctl 4004550a 200000c0 returned -22 [ 584.210705][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 584.258877][T18518] binder: 18516:18518 ioctl 4004550a 200000c0 returned -22 16:15:56 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x94000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40046207, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 584.577533][ T8292] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 584.770028][T18523] IPVS: ftp: loaded support on port[0] = 21 [ 584.827125][ T8292] usb 3-1: Using ep0 maxpacket: 16 [ 584.967050][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.986958][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.001941][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 585.014867][ T8292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.117113][ T8292] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 585.128519][ T8292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 585.139813][ T8292] usb 3-1: SerialNumber: syz [ 585.151966][ T8292] usb 3-1: config 0 descriptor?? [ 585.879401][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.887453][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.894884][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.902874][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.911777][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.920336][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.928648][ T8292] hid-generic 0003:045E:87F5.0011: unknown main item tag 0x0 [ 585.938190][ T8292] hid-generic 0003:045E:87F5.0011: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 586.080069][ T8292] usb 3-1: USB disconnect, device number 78 16:15:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be"], 0x0}, 0x0) 16:15:58 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x2, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x81}) 16:15:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x6364, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 586.644057][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 586.677226][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xb4000000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 586.699023][T18619] IPVS: ftp: loaded support on port[0] = 21 16:15:58 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x3, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:15:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40049409, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:15:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x751400, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xc2020000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:15:58 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x4, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 587.037620][ T8292] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 587.281908][ T8292] usb 3-1: Using ep0 maxpacket: 16 [ 587.332241][T18619] IPVS: ftp: loaded support on port[0] = 21 [ 587.407629][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.457040][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.478566][ T8292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.587706][ T8292] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 587.602297][ T8292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 587.613755][ T8292] usb 3-1: SerialNumber: syz [ 587.622403][ T8292] usb 3-1: config 0 descriptor?? [ 588.309079][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.316563][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.324159][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.332292][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.340353][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.348355][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.356219][ T8292] hid-generic 0003:045E:87F5.0012: unknown main item tag 0x0 [ 588.368589][ T8292] hid-generic 0003:045E:87F5.0012: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 588.514334][ T9721] usb 3-1: USB disconnect, device number 79 16:16:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be"], 0x0}, 0x0) 16:16:01 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x796}, 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/dev\x00') getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f00000001c0)=""/193, &(0x7f0000000100)=0xc1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x60fbf3d7c386e2cd, 0x2, 0x2, 0x80, 0x0, [@empty]}, 0x18) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f00000003c0)={0x51f, "783f4ad890c596ac4dcf8b94d277640b44ff322407795e07efcaebf564553ae544bfd11858ed6a5cfd2b8b1ff19367dea58be9534b0836ee5f93ad4410d735a763cc2307a8a2d2dbecc9988239fe7c577c27427ae0a4b3d08339f4547b13b20ce5f96aff3f7bbe57cb4900ae805aef66c7730e5d8bbea3cd204977025a897683b251048e01b21307622b3ae7a5b455bdfc17bd83d77208ea4fee16cf5925a370364874aa03a8468dd0c384c62289a6638d25f0ad0d94a0804fc5265d16224833dd3f197b08869d3cc2a48242da88b7acf50ef4bd9362ea18f7487ac415fcb8a77431f49c8f547ecd75d3297c688df78226ad1bfa47a5c88280f536bb438b93f4b2c7e1ac30b826df7ecfd6ae45344cbdf7e42a4a5f65ac1d4b19a040fd6928f5ae9c400bfd95c124811b490b576380b3debf00a223d3a11ab090340fe222fcc731a8b856a776724382bf58b72102a099a2d81a0ff9a34c17d7613b743d368fbc767a688d44d826546dee2de704d7021bbbdff1a977d7851025144c2da0828e8cb09971299d4d74b4a8e8b90b2f66104b30a069959ac3c4cfdc0c10a819bb76f59cc42bf9991101a87fbb7367001dcb8da0b2d1acd44e1c6c7b972e17a44658bb62ddcd10a952051e35279abf2a4fdd68fca26f000cc5a3cf76baaaaf21e197bffe4cdcbfd534d5673a94daa6b18aba49bda95a65c75b10d17b50dd4eee3db1af06a544922b06226f0842c2f25499f1618f8adc640480a9efa9eb1807a3f0cc2de8c8e8f7227f389f1a352710bee5d6fed987624e7d17e5b7300918f2afc9a939325aa5c1f31ece51d009158ab4f26f5c7b7340e6605a84e97df79cc14a36de19d9edb0aad4904f9ae662f50deba242d4bba99f6f07a2e0161e59e4913d3ebc46da8cf84a96e133823bb0333ec1086134179aecbd32d33cd448562dc9e3640e741753a812386d9eb098748e49a69612f21ddf3e0c9d4de184e27310ef7ab329b0860ab2112893a5e8b67c46af7194ad1f2f703a59cf4c1f2567ad29f549a1d290b9013170b220cd06fab1a25064779f94d6bbd0b432dd1e2456506334cb55fbf19132545d0e0de9e095001600d894a13fd4f7535126cb8672352ea0d8159ccdcea0a906e5eaa1bc6b932c2df3905a9cc13bdc857b590d9730e795f93c0c768d4b2fce23f2a2fce45a8b5a85817fa64cd0e74e55ed67bba14f4607c5581648e621245d20709f873a02b954a6e1f696f4d6fd04370f1081ad9bb386a3f3771498f070fcb49d05c9c6613168643bf5bef29b05db2f1c1d37fce3136fc01561becf92dcd0f19433a417be93a10e4ecc83feb04c3263a2b584847612d4e9cc803652896d856d82e4c4a24e730f5b14c67ccee59078b329e8ada3cafc02a9e631ff205db8a09ad7a74401c80e21b8595c5aed03312396cb3476f0a9120a59bb0bda6d3c5801b46ac533869de0c9b7645196e29ba363df28ab2b7a6478c318ba473050031ca207fca42ce9bc99d0eeca28f205c97110a912ab8e7033253edb4fd427199a0d189b5baf2e74d1c5c23babc7c6bf4af58934eb4eb3ce60aa68a874bf315652762be180f4892baa9108f919f107a976ac00c124f04877e3edd15c49d1c2c3dc9ee6fb5a8f4920c8d0da9761d84e127277d34a32b4ea80f76b4a5a14059ff825f6ab9c223aec89cced28fa7408d01a4b061db752eeb78e95b630625885ab9cd79dfddd3733041e6bd908e1d56ec20a0e320cf57524c4dac0a757a1995383c2a97188c24a0b1b30de7b30416bef923438f8a45dccaae318491f3bea9bbd6ace0557da35ce39d227891ea15400521ecc8a1c970e52b7a6b86911f0b832177b47"}) close(0xffffffffffffffff) 16:16:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4004ae99, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:01 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x300, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8901, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 589.100239][T18722] binder: 18715:18722 ioctl 4004ae99 200000c0 returned -22 [ 589.113429][T18719] IPVS: ftp: loaded support on port[0] = 21 16:16:01 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x4000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xf5ffffff, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 589.148597][T18722] binder: 18715:18722 ioctl 4004ae99 200000c0 returned -22 16:16:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40085503, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:01 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x1000000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 589.389380][T18757] binder: 18756:18757 ioctl 40085503 200000c0 returned -22 [ 589.420261][T18757] binder: 18756:18757 ioctl 40085503 200000c0 returned -22 16:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 589.447309][ T9721] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 589.652066][T18719] IPVS: ftp: loaded support on port[0] = 21 [ 589.727168][ T9721] usb 3-1: Using ep0 maxpacket: 16 [ 589.847819][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.869991][ T9721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.891784][ T9721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.015053][ T9721] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 590.024551][ T9721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 590.043047][ T9721] usb 3-1: SerialNumber: syz [ 590.056624][ T9721] usb 3-1: config 0 descriptor?? [ 590.769246][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.776708][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.796215][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.808175][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.815940][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.834309][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.847299][ T9721] hid-generic 0003:045E:87F5.0013: unknown main item tag 0x0 [ 590.869630][ T9721] hid-generic 0003:045E:87F5.0013: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 590.969704][ T9721] usb 3-1: USB disconnect, device number 80 16:16:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be"], 0x0}, 0x0) 16:16:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8904, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr, 0x80000000}, 0x1c) listen(r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x70ba42, 0x0) dup2(r5, r6) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0xf425e) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:03 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x2000000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40095505, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 591.569969][T18814] IPVS: ftp: loaded support on port[0] = 21 [ 591.585906][T18817] binder: 18813:18817 ioctl 40095505 200000c0 returned -22 16:16:03 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x3000000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 591.649757][T18817] binder: 18813:18817 ioctl 40095505 200000c0 returned -22 [ 591.668011][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4010ae74, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:03 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x4000000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xfffffff5, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 591.910062][T18854] binder: 18853:18854 ioctl 4010ae74 200000c0 returned -22 [ 591.947050][ T9720] usb 3-1: new high-speed USB device number 81 using dummy_hcd 16:16:04 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x40000000, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 591.973468][T18859] binder: 18853:18859 ioctl 4010ae74 200000c0 returned -22 [ 592.207011][ T9720] usb 3-1: Using ep0 maxpacket: 16 [ 592.293327][T18814] IPVS: ftp: loaded support on port[0] = 21 [ 592.328408][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.357055][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.392940][ T9720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.417793][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 592.527946][ T9720] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 592.551948][ T9720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 592.595605][ T9720] usb 3-1: SerialNumber: syz [ 592.616380][ T9720] usb 3-1: config 0 descriptor?? [ 593.339377][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.357388][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.385473][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.402314][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.416443][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.432088][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.446243][ T9720] hid-generic 0003:045E:87F5.0014: unknown main item tag 0x0 [ 593.463521][ T9720] hid-generic 0003:045E:87F5.0014: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 593.540950][ T9720] usb 3-1: USB disconnect, device number 81 16:16:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be00"], 0x0}, 0x0) 16:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x401845ef, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:06 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8002, 0x6599, 0x10001, 0xbe1}) 16:16:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8905, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 594.220786][T18914] binder: 18909:18914 ioctl 401845ef 200000c0 returned -22 [ 594.250579][T18916] IPVS: ftp: loaded support on port[0] = 21 16:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="030000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 594.271190][T18914] binder: 18909:18914 ioctl 401845ef 200000c0 returned -22 16:16:06 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8003, 0x6599, 0x10001, 0xbe1}) 16:16:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 594.467896][ T9442] usb 3-1: new high-speed USB device number 82 using dummy_hcd 16:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f0000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:06 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8004, 0x6599, 0x10001, 0xbe1}) 16:16:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x40186366, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 594.717056][ T9442] usb 3-1: Using ep0 maxpacket: 16 16:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 594.811110][T18956] binder: 18954:18956 ioctl 40186366 200000c0 returned -22 [ 594.837768][ T9442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.864706][T18956] binder: 18954:18956 ioctl 40186366 200000c0 returned -22 [ 594.871194][ T9442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.904350][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 594.921463][ T9442] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.055425][ T9442] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 595.072940][ T9442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 595.110594][ T9442] usb 3-1: SerialNumber: syz [ 595.135525][ T9442] usb 3-1: config 0 descriptor?? [ 595.210326][T18916] IPVS: ftp: loaded support on port[0] = 21 [ 595.859208][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 595.875971][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 595.919346][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 595.947538][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 595.956303][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 595.987081][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 596.004749][ T9442] hid-generic 0003:045E:87F5.0015: unknown main item tag 0x0 [ 596.036885][ T9442] hid-generic 0003:045E:87F5.0015: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 596.083960][ T9442] usb 3-1: USB disconnect, device number 82 16:16:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be00"], 0x0}, 0x0) 16:16:08 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0xa, 0x10001, 0xbe1}) 16:16:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4020565a, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8906, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 596.665575][T19008] binder: 19003:19008 ioctl 4020565a 200000c0 returned -22 [ 596.686538][T19006] IPVS: ftp: loaded support on port[0] = 21 16:16:08 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10002, 0xbe1}) 16:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="147100001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 596.722210][T19008] binder: 19003:19008 ioctl 4020565a 200000c0 returned -22 16:16:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4020940d, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000100010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:08 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10005, 0xbe1}) [ 596.997219][ T2879] usb 3-1: new high-speed USB device number 83 using dummy_hcd 16:16:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4020ae46, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000200010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 597.185421][T19053] binder: 19051:19053 ioctl 4020ae46 200000c0 returned -22 [ 597.247081][ T2879] usb 3-1: Using ep0 maxpacket: 16 [ 597.253324][T19053] binder: 19051:19053 ioctl 4020ae46 200000c0 returned -22 [ 597.367785][ T2879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.397154][ T2879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.437041][ T2879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 597.557610][ T2879] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 597.561745][T19006] IPVS: ftp: loaded support on port[0] = 21 [ 597.572888][ T2879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 597.607057][ T2879] usb 3-1: SerialNumber: syz [ 597.630669][ T2879] usb 3-1: config 0 descriptor?? [ 597.648694][ T144] tipc: TX() has been purged, node left! [ 597.661728][ T144] tipc: TX() has been purged, node left! [ 597.687486][ T144] tipc: TX() has been purged, node left! [ 597.716163][ T144] tipc: TX() has been purged, node left! [ 597.747840][ T144] tipc: TX() has been purged, node left! [ 597.787569][ T144] tipc: TX() has been purged, node left! [ 597.980661][ T144] tipc: TX() has been purged, node left! [ 598.140413][ T144] tipc: TX() has been purged, node left! [ 598.297069][ T144] tipc: TX() has been purged, node left! [ 598.389243][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.396719][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.426074][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.448168][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.455857][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.467182][ T144] tipc: TX() has been purged, node left! [ 598.484311][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.508416][ T2879] hid-generic 0003:045E:87F5.0016: unknown main item tag 0x0 [ 598.528787][ T2879] hid-generic 0003:045E:87F5.0016: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 598.597900][ T2879] usb 3-1: USB disconnect, device number 83 [ 598.629471][ T144] tipc: TX() has been purged, node left! [ 598.787107][ T144] tipc: TX() has been purged, node left! [ 598.977081][ T144] tipc: TX() has been purged, node left! 16:16:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be00"], 0x0}, 0x0) 16:16:11 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10300, 0xbe1}) 16:16:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x402c5828, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8907, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)={0xff, 0x0, 0x1, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000280)={0x20, r2}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r5, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4) 16:16:11 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 599.181425][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 599.216858][T19106] IPVS: ftp: loaded support on port[0] = 21 16:16:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000800010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 599.244624][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x402c5829, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x16}, 0xfff}}, 0x0, 0x0, 0x3b, 0x0, "5b965340a53aae6636f9bcc55935cd4a01e622849f7621a88d31ef4e4c4bdca59d467f88657a6a355e9ea955c2f86cdd49c396df3e26ca9c058958e39f2211de7c89302e772dfdade436f46211b6e45f"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:11 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x2]}) [ 599.497884][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 599.545857][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 599.587073][ T2909] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 599.847101][ T2909] usb 3-1: Using ep0 maxpacket: 16 [ 599.885709][T19106] IPVS: ftp: loaded support on port[0] = 21 [ 599.977806][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.001870][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.023007][ T2909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.117846][ T2909] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 600.127085][ T2909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 600.135263][ T2909] usb 3-1: SerialNumber: syz [ 600.146246][ T2909] usb 3-1: config 0 descriptor?? [ 600.819476][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.826922][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.841240][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.848865][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.856268][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.863756][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.871358][ T2909] hid-generic 0003:045E:87F5.0017: unknown main item tag 0x0 [ 600.880304][ T2909] hid-generic 0003:045E:87F5.0017: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 601.027342][ T2909] usb 3-1: USB disconnect, device number 84 16:16:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x402c582a, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:13 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x3]}) 16:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x8, 0x0, 0x5) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) r4 = socket(0x10, 0x0, 0x7) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x52181, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400515ee6d89982a011cc6a8a3e94919bf5614a06b36e5bd98b4d14995138d72d96d16b1305709883df94fa58df38223140cf6994b38004f49c3631f4f87597d8e1a196b4c3aa4a4f6c77efcf98028c65f136a06830a172c127fd691ccf740351d96b2c448549bbaaa934a968a91e50f730c4c8de0ed7c8896cf90a8bcbe9f964a4ff41debb735d1691e85d6768dda22e57f2d7b700ba803d50", @ANYRES16=r6, @ANYBLOB="20002abd7000ffdbdf251000000008004b000300000008004b0006000000d7485d94f8182054e01bb47bd2bdac0e35ab29f38296eecbb98d9bc58921c106628945b28e60a8fdb650d51b9c51f7d0da021c69f3321c8a8c84e1fd71a8ed98d075e2ce0489e20500e00285ba00fc0cc24624aec015f17a2ebc2805ebbacc88e111119db5e970c2e9e7b39cd0c5a2e59e896d4d4e024afa5a32657011716a7a5ec05b97f6569b64f4304c63dc4495553d3af001541bc4bf799541c3a361d40d002ebaa058cc8ec0d76bd14d40e3f6d941e30e01a41f4ba3f06ad01b21378d909cdefa3e9380491700"/242], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4) close(0xffffffffffffffff) 16:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000f00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 601.606307][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 601.625630][T19205] IPVS: ftp: loaded support on port[0] = 21 16:16:13 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x4]}) [ 601.672653][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8905, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140200001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x402c582b, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r3, 0x1) close(r0) 16:16:13 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x300]}) [ 601.894899][T19228] IPVS: ftp: loaded support on port[0] = 21 [ 601.920798][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140300001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 601.959005][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x402c5839, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x5, 0x1, 0x9, 0xffffffff}, {0x0, 0x40, 0x3f}, {0xfff9, 0x2, 0x1, 0x634}, {0xffff, 0x0, 0x1, 0x10000}, {0x8, 0x3, 0x0, 0x6}, {0x6, 0x9, 0x3f, 0x100}, {0x5, 0x86, 0x81, 0x5}]}, 0x8) 16:16:14 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x4000]}) 16:16:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140400001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 602.185066][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 602.230369][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 602.521726][T19205] IPVS: ftp: loaded support on port[0] = 21 16:16:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4090ae82, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket$inet(0x2, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000100)=ANY=[], 0x1) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x4, 0x1000, &(0x7f0000000300)="9760f395e2fb3af10099ccbf92b03f130565111827dac6bf60be348467a799810332650eed1f1a7fa3a6b76046e5a06f3426ed2c51800d8ef5bc7910b1d6e14a0a3e215f2309fdfda2984f0e28c6fd2b25e1413a9fae42dfd46e9e1c0e0ffb60b4fcbbaa93aa828cc349f62e20bb2e7a9c65ef16581b243e73356e47662d7e5ad77a2c8fe8e4831ab3a132987294f348f846e04f48eca1ed3c3bed00e8d502c2ec011f8dd5fc90c3adc464e46667fbf49d1a3128d9daa8c3093a766b46b2b75a04df7f0c65bdee828f80e475fdf9d77b65b0b8e003d9170b73b1c542ad381240d7601ddfd99c0af18fb8138687224200d35603573406b3a048df9b004ca635e50615784266f5478212d2bd387c317f57bf770f01103f4b20d353e1d77686d52d53996927547946694e574965e985d1183efdc1a721262f5bb86184626bb1fe5826465051325b9b745fd26b2000a486ad0b28f968d20c1adbd08e62c163356af4400399dc7e963034da2af4ed343fe50880f093579e4c7adabd8f8c5d39278af0d95c6726a7ce4c85b0710a17e592ba41e0123b7ae304900c442236a7bd924987107b46972a2fcc951ad91495d3be27b90ec35d0af8970bbbc7d994aa935191daead99097bae54e33f8d6eca76b47d5f4cc2a7a52da5658cf6c1b7b7540e03f9c03b326ca52f9e2ab4afead15687bf4ad724e333eaa7a890231def94834f37f3db1e96ebe3d8c965c80fb8b84f660c2e43e7b9739778295f7ca6ecd6eb09a278ea9a0de0676738c237f6b591914862320137a9d4193412aaf500cd94731f37ac5953ff8015f32564644f4b37a4623736c865bae7b852fa99cc32417f838b6721d0dfebddb630cfe1a759d4ef571a3487059521bc1b7455690f30faf5c95cdc1e83be6fe8077b9cb1e8175efd343da96bf17c789b8a6b45c41412981bceec6ddc47f01715f84e10232a493305e6ebabe6e6951b6e5456d0ea004b9f622a4cf1edbb5c96ef0b57a24ce05bd08b565c1cb2e40daefe9b2df24c268661e52d5eaa2ac6ef9b962375d700c709eb3ed0a332937e3e3026fb7f3e71fe638ff95eb6a3ee1af92db083b3a3d36c795c35fb030e71d57e3114899e54f9f96f666d237adbbc6c4bd88fcf765042478aee3ca6787168c3e6280e2e08d7effd444ae075227c7fb80315977de9e32b9676492616973f34d1c99962c0812d39e26e0f500217c087982fe9d1470cdb1bb6e815d932ab80d31951d00cd1bae2dd16e5774c47b47d19c0ac379703afdaea4e73c7598e167e5ffe5fc8d20a6a714847f05d75b844232bd066719bb144228bc13ac4a81607474e8ed7869436b9ebcd2c107559494d9affe72032e347c75a1e9cbf8a62a6289d79fcb48210d3d3055e25e911b42dcf0b2a58aa70097b8ff64d433727e03e4902b82bfaa739d67c769b52ea646718053bb39b3297a2d9f838902f9facdd25412234ca50c9dd3a046f604105b4057b0410ad1f6e87acc2de7194776829ed2190ca287f03e0f62525034713ff42423aba6241940652cd2dbc339c9fe825a168347d53949b46f04f268a0649860acc754e9b0a4378b58d4b89e6e539ab165eb61e46146f51938159706c47c2a3bf00d2e5146b7d173237641a7d1ac3dc870894b9f67e417a8050db264adffb1c184a68c5c2d7b3fddfeed52fced597833801e7ef7afb818b4e39eebbddeece12ba58338d39281e7aa54cc506ab9327010fcc638dd4909508dc4e579d30594f87a553cf723721285cac898c6094fd6574d645f1d72b0ca6c145fa74b1540a5feb42e6ccac255aa833009f77e6afa0e495f04b52b3ec2258b690fc09aae248dbbf01d72a173eed91613fd524ec414fbc21911a6197c6f4aabe5d12dab52aa81ae95d573bcbbb81081aaa147c0c35ca410f3e22e57d4de07fd42d5e4c6c3e21f01fd184581c12884cb24bdaa3f2f9e67fa5bc05df73b06078748d3f1ba083e054a00849c991daa25047d162f7a9b2a3d2b0d06589444de851952560303bfa7a6f1ebcfc2b0129ae815701fe4abe41e15634422ee1a80a94914d60906ff259b14396d34a29a867131b7b6c9546b9d794d6e3ebfcf3b4604289fe7786f7a7d3b2789e4d5780e097a53ccc9feffe32878edd16e1337a3dd22570f13ea6f40da8dcedc2fa8e8a24f30b63185d074e974d2545249368fe13eaa4223ec7475953a3dbb169ef4998edb3c3428b99e8b353b97ef86621a7ffc7912ba2238213a83a3a6738cde5ced96cb21faf1ac7c8a2c0f26ddf42c98b904e73e78baf448080e2a798b4b56646282130d9230777074674fc5db1acfd06c58a50ecd9169f85df13534aec33ab2709e010dfcef011501d9d34fb588e8d39ea83ba49b6314e06980af0d6a314f31b1ffb95d1eeb462531c73c89a6284b015309864ce49c8575114c4b48b675100b77d7cb25e0d46caac1a46e7835c59e599686fccd664befcb615a301aa3895e4bed2182fed69cc25dba174c2979f0f96e201775ee91fbd2d6b064902729af55159f93d05862340d003d6c2d3305025c4e26e05108496b1523bc32c861b380f8cc6f6273c092ed77b9c4df4e6dadcb13652c76d7e48dc2ec9f185e3bd0906adb9e12a26e8c9784ebd1e743d279fec0f13d796046958e0e5153c89f6cb525922398637c5992c1a8c4ecc6730838c3eb500c90a1443899fc40370a228bdd80cb384171df467e24e08fbc46220630f7c8d4e0cced0e4cb9e1c12ec0538355fe4a5e5c8f5a614c2546045ba02cdd541d5d137e8885ddc05a61c02aebf5a95c8ba340908314310b18095a30b441eab24212366d03b2ddd3ac29a85e64c9e274c2364a3af2b33121d2e4611f46fd846d45b18fb6e03200071828f2c6617abef31b64bfbc1f33b25e03021bb6829482a58a6dd2432f1f3c1a6d383d13ff6207416d7336ffe8ad5183bfff34698f59ab15cff13fc807b6679c5f7966e734421b76f691a08b7336f02bb157c0ec8240d628a1fe7d1242f0c5c59baa6f5a11c2d0a1552d69d9dfc890fdc713dec53d3d71c1086ec9b379a2269bb5ad1d398101b0c44f61dfe99a6bde7960539acb6d46ba7b63e3e6b73deaf100a05c02c93fe9c879bdd524c177970f083d655e4b5bd07a614a2ae318607798d9071a8e0d69caa6689f73c176009b9370f1d2d134923bba85775a73ade92822ff9c8101b721ea7699767dc4a60c05bfd9c3ae3ea937381998fdab09e8e32e58cd85e6c4ca9ff50aee9e95e240b5998f1ef35f4d248d9e03641c666612c6a58097fb89772d02cddd381b9b79491bfb441defdae2ffb86eda3d070bcccd86e57bb7ceafcb95c3bf734f9e2e3d2ce989b53d3822d720fe806b9466f000c1a3e9248126832e70501368ffd8f7131ca5134928faa9abacc63ff6d6a3b27c90b931d1d968dc379af7059f2541003a3916ed63b9882d66e219d06e5d9062c70b5f72506b3c4df2b32aa8174ae53f81f95aab7689858c2ee90d1263c73aae139d22be2d9d178eb927ebc8859ff36dc34694ba0a5982cb06558072036954f07f511845d42c6d310adc571e193b51af9be58d2fa647e02c3d48d9271b6e614a5e91941b5178bb85ddfffdbb8e17e25b089942457a7e148a4165f77d4a274bb2136bc69359ea80b38a391937fa8e085df7e927f8b098a055b92c6fed80204a51087cfbf8cef146973847c99be29d745246bf80b7064d9b30ce1193482cb9012de51d5eea91cd652ae9389abd7486f826ad1ff556482783423ab005d2b8f36daa3b433ce22eb66038bdaa0ece81634adab2643e0bb490d99d46c6f4a31a6f1680c842ef7d89c332ee149a24354765ef31ee3b42509d01c3fc3a75f300d1b9496351c4e920711234f4e63facdeb3b9f5a388f265b3bbf5b0f554f6645d898d0dbd213de9bb55bf07a0058856303653cb33d91abcf6bf358008fd7723119a7d1e3767d8d07f2f47a4e2f57d32a2a1d843850cd629a3248edd1ad039cf771cd842c5736911da1f8198a397ab309ee6ea9b0d28140659044bbd52e71c75d4bc72e87c0be0114af74d1aa20dda17e587f69e0ff81581bbd291a085417080e333df487e3a29edd8848b3360fa6e079d36ca4ee36e9ab6ee09842db34f76d79e2291ed5f3973c475ed43b0fb6f3d7ee30bd48ee6f4563e81ff1d9143377519e90c886f17a7384ab9c2823fa433098568f2b99d53adb2cba4bbc2e50a0e131b90c9ad55eff3922566d1c485f16d8a885c00a9b05d80f7d732486cbbdfa1ad7ea2b5566c71334223368c24d2e8904bfb0382cb8d48f6372a4c74dded6e821f59c48ec6b5933f398c0c62fb8272bb27203b5c7fbca031c2844608b4d3d2cb038f966adb8756222f9456403b1d9741bc0155171046050c07231b34a24c9ff8181d34073ada1a5f405ada86717dc82f3e3b8e0f0d218462980fb891d77958eae6023254e841fca18c30d2338d167e853e2b0efa153a50177d6f6856991675c6f2eb51c4827c614e342e10d98938b7ec68aed12c2beee448616b740e8e996a28de2bfe0456269662ef4e0d7246b5ca8b0111fb8681dab5d727ef50065eb20eb6c652b221f4e782700c9c5d7221eccf42a9d19017c2d4030ee8e86d8e5506c0a1735c414f6d54eba0bcd906e9a9a4798ab07cff05ff311ed6724dd7c765c118af85ef1672984b568ae5b5b40fa7cc0209a754a02a7df8a4ce81892a0e25f7bce8ae27f1f4a5e30e651ae2f6593da9ba1277e1424f5f7e0f4988e2504cf131718da6198ae225cd6842f5c278db3c4252284e495487d36db3351c37191006797a3f5350d50b2e45885d32173f0036b96fd51d89a40b976e4ed2ca2f546111a7e7b754b648e73cdbaeba28588ee9ef3cad20f690d23b5f90a576558e325b97dc1fd4613c6a4315a7fac55aab63c12830a6453fc4b2f5a2661eabe3aa209e13ccf73a0be444dbcfff15dfc40074dc3abfad7cbd63887c6fd7551d27fba5e29fd43b461947f32104210e76d35ed6b13e5175fd20566816dd534841df3dd9237aecdcefa39989887517d857202b105a060af52235ede2cf10ecf908568a7076f5b1db1525371e4e7f6deb36f3e75bee94166547710b289aa40263053d4d2b62151d4a68901a9699bcd0b2526dbf6e741ed9c1bd89a99b55706dc39f6d423656c8aac5718113d71b3d66adedc1289914927934a1608eac55c7cf774ae27920f4d409857264b3f37f92ee917d67216f8f7ea8e9a3b8a9ce582d42e7b5dd448c30368f34c53e2b980c167aefe6d03014a3d85f0b5e0ff04c7865990a92d5133d3a3a811b8c4771189b369f07aadcb6deaeb5915136661adf5a162017924e2c570df2b085a0680f280bf9d1258a4b37d52f1a56c1a4f4eb741e10e96a6fe2476d644aa97954291e5abf3c74b63790ecb01fd94477dd009f200a632aee004670326f0d15c0bb74e70fd6b7935d06a5b4fc9163c4f384e6b54ee123827bd31f6175b1f454b8d8a4b35a96ee8fa31fdf4337d4068ea8fae48f2096cadba624a04586d436378847ac9f1c34a1c7f7a9552151dd23cab46cc5223d5513e2342e77eb37be0c4f61e3c951825238d634912dd8d25d9d8e1bfd53a70352fea238195fb76d60c1f0358fbd438cf3269584dd77561fc87288b7820f92b36b7acaaf0b1ee9401a1c539f5eafe4fb7bbeeef73ca9141373f4aa563816ec7daf098571d1da3017ef569d48a6ecae021c35c4da3feadc16474aa0d07c303a4b879c9f477b187d936c0b3a2a22e15e2f8ac60aaec51a45099695f0eeb818db14fd255a209ae2b08bc3ecd0"}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7ff, 0x320e2a399ddb1ed7) close(r0) 16:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140a00001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:15 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x1000000]}) 16:16:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="fd000000000000105e04f587000000001e010902240001000000000904000009030000000921000000012222000905810361aa48cedd6d2cff5703224001ef51681eac7ab8c786b81d3486e4023657acf9e6464946624df3e927cb1648d63b2bf44224d3b21b1d34e5d3cd263f0945ff1c7fd94d6b4408254fab88f178de1920b9391ff7b35d3871fcb663832e9de2c14d6bbe2b140b26594f1f87749d85062e531d36a2d6c860078a9df6595bce4e38621d25dffc31f5840f353c74e6ade09c204e906d4e22ba"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x48, 0x1409, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2400c811) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 603.063961][T19322] binder: 19316:19322 ioctl 4090ae82 200000c0 returned -22 16:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140c00001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 603.107558][T19322] binder: 19316:19322 ioctl 4090ae82 200000c0 returned -22 16:16:15 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x2000000]}) 16:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES64=r4], 0x1) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0xffffffffffffffff) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x40}, 0x8) [ 603.185495][T19331] IPVS: ftp: loaded support on port[0] = 21 16:16:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x41015500, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 603.311986][T19350] binder: 19344:19350 ioctl 41015500 200000c0 returned -22 [ 603.351789][T19350] binder: 19344:19350 ioctl 41015500 200000c0 returned -22 16:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x5e62, 0x5, @rand_addr, 0xffffffff}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140e00001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 603.359301][T15079] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 603.637283][T15079] usb 3-1: device descriptor read/64, error 18 [ 603.732080][T19331] IPVS: ftp: loaded support on port[0] = 21 16:16:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890d, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:15 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x3000000]}) 16:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x6) 16:16:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x4400ae8f, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="141900001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 603.926512][T19402] binder: 19399:19402 ioctl 4400ae8f 200000c0 returned -22 [ 603.961512][T19405] IPVS: ftp: loaded support on port[0] = 21 [ 603.991769][T19407] binder: 19399:19407 ioctl 4400ae8f 200000c0 returned -22 [ 604.033669][T15079] usb 3-1: device descriptor read/64, error 18 [ 604.258884][T19405] IPVS: ftp: loaded support on port[0] = 21 [ 604.317188][T15079] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 604.597176][T15079] usb 3-1: device descriptor read/64, error 18 [ 605.007221][T15079] usb 3-1: device descriptor read/64, error 18 [ 605.139594][T15079] usb usb3-port1: attempt power cycle [ 605.857274][T15079] usb 3-1: new high-speed USB device number 87 using dummy_hcd 16:16:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f20200e68615adf400000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:16:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="146000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:18 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x4000000]}) 16:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_getaffinity(r2, 0x8, &(0x7f0000000080)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x80044501, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:18 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8910, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 606.047243][T15079] usb 3-1: device descriptor read/8, error -71 16:16:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="149400001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 606.117939][ C1] net_ratelimit: 4 callbacks suppressed [ 606.117950][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 606.125527][T19467] IPVS: ftp: loaded support on port[0] = 21 [ 606.148596][T19468] binder: 19460:19468 ioctl 80044501 200000c0 returned -22 16:16:18 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x40000000]}) [ 606.203743][T19468] binder: 19460:19468 ioctl 80044501 200000c0 returned -22 [ 606.257293][T15079] usb 3-1: device descriptor read/8, error -71 16:16:18 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x800448d3, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14b400001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:18 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x2]}) [ 606.463678][T19505] binder: 19498:19505 ioctl 800448d3 200000c0 returned -22 [ 606.518161][T19505] binder: 19498:19505 ioctl 800448d3 200000c0 returned -22 [ 606.605173][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 606.713210][T19467] IPVS: ftp: loaded support on port[0] = 21 [ 606.748566][T15079] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 606.937700][T15079] usb 3-1: device descriptor read/8, error -61 [ 607.217259][T15079] usb 3-1: device descriptor read/8, error -61 [ 607.338621][T15079] usb usb3-port1: unable to enumerate USB device 16:16:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x80085502, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14f000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:21 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x3]}) 16:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)=""/7, &(0x7f00000000c0)=0x7) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8912, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003ee000000ee032d0022a0ad9e5138555b73ee07cdf65efc9d3e52154e64317f289d147c1d0d71f9dacbc4f1e88a694543af71434e8498eba04f233900eff490ba6746e86f37e8002373e08de466b92251598e609b84317c9712ac11ed7a70cb91461eea38dd7f48678e20f016ce79eec1e7626a30acb188ffb24e6b03c69d374c56f695556cfb599ba880b24fadb455a09920921ef4a304468c80665f1b18b9ad65c680cd79ab142970cb0cffcc44a385c6555d34f6f35aea6feb67f0311ec156f510afcafdf6ae3814b2022ac2adf8b670f9e6d80a7f2d33046044e3f88c0f661d1359ae1d29ced954330ff89fcb180c3c73"], 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIOCLEX(r6, 0x5451) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000480)={'nat\x00'}, &(0x7f0000000380)=0x50) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0445611, &(0x7f0000000200)={0x24b2bdd5, 0x4, 0x4, 0x10000, 0x4e6, {0x77359400}, {0x2, 0x1, 0x0, 0x8, 0x1, 0x4, "6cf93278"}, 0x7fff, 0x4, @userptr=0x4, 0x3f, 0x0, r1}) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$UHID_INPUT2(r7, &(0x7f0000000280)={0xc, {0xeb, "309b1aa1ccec488f721d76243c6f26ab4b86e6631ef80593046722b1e0df3cd62aa05328a560bc2edddd8ee3d36b7c631f937d9e83e601e714abfc755197386a00b72cbe1641c3b4c65575e725add93ae81c57e39050807d2f7d8ff0a21ea61c02e240149642eb75539f7a227394255199b1a144bc1deec5461074d055f95e94fa2a0a7baf93acbe585627786f2b944a41ec0c3921b7461f2d5840eba75a9b0a243619c9e81118d1cd843ca8a6adb35cda41d6b77c0c625446fae84b21452839a52786da7489ad4701c98fd8f3d5ccaca94660c8e3a7edeabc70da4882a5bf57974c19ed89116329bc62b2"}}, 0xf1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 609.189632][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 609.189939][T19542] binder: 19539:19542 ioctl 80085502 200000c0 returned -22 [ 609.218353][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 609.246315][T19545] IPVS: ftp: loaded support on port[0] = 21 16:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) listen(r1, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:21 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x4]}) 16:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14c202001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 609.344975][T19549] binder: 19539:19549 ioctl 80085502 200000c0 returned -22 16:16:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x80086301, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:21 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x300]}) 16:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x1) r6 = openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82400, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r5, 0x7, 0x7, r6}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x423}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x1) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [], @private=0xa010102}, r4}, 0x14) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140003001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 609.583116][T19584] binder: 19583:19584 ioctl 80086301 200000c0 returned -22 [ 609.587405][T15079] usb 3-1: new high-speed USB device number 89 using dummy_hcd 16:16:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:21 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x4000]}) 16:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)="85acbb76abe60e6b1b3f432d60b651f3b08bb8d28e0ea440bd5643fe1eb611335172e71325abd755aab52b027a48e1fc1d1901678ea3ecd0e9e87332b659fbe4a4fbb7e7309be657c2a85d77bf8e2f12d4ecfe94fffba7e8e6607f0830cf203e2a817a9ac74703e4b2e2f227d5ce31711b186b03a5ae7f275c3b9bb54e") close(r0) [ 609.816527][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 609.847604][T15079] usb 3-1: Using ep0 maxpacket: 16 [ 609.891375][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 609.967820][T15079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.004153][T15079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.029151][T15079] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 610.068027][T19545] IPVS: ftp: loaded support on port[0] = 21 [ 610.168148][T15079] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 610.182810][T15079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 610.208730][T15079] usb 3-1: SerialNumber: syz [ 610.228600][T15079] usb 3-1: config 0 descriptor?? 16:16:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000a001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 610.929525][T15079] hid-multitouch 0003:045E:87F5.0018: unknown main item tag 0x0 [ 610.947703][T15079] hid-multitouch 0003:045E:87F5.0018: unknown main item tag 0x0 [ 610.977537][T15079] hid-multitouch 0003:045E:87F5.0018: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 611.136358][T15079] usb 3-1: USB disconnect, device number 89 [ 611.927433][ T2909] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 612.177304][ T2909] usb 3-1: Using ep0 maxpacket: 16 [ 612.297948][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.309051][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.321697][ T2909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:16:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7ff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x310}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x44) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 612.407483][ T2909] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 612.416566][ T2909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 612.425215][ T2909] usb 3-1: SerialNumber: syz [ 612.431759][ T2909] usb 3-1: config 0 descriptor?? 16:16:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:24 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8913, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:24 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x1000000]}) 16:16:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000c001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0xffffffffffffff62) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000300)={{0x2, 0x0, @descriptor="b39fcc5ff44532b5"}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2501000000080001000200000008000200020000000800010003000000080002000200000008000100010000000800010003000000080002000200000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48885) [ 612.471128][ T2909] usb 3-1: can't set config #0, error -71 [ 612.518867][ T2909] usb 3-1: USB disconnect, device number 90 16:16:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 612.566939][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 612.575734][T19667] IPVS: ftp: loaded support on port[0] = 21 [ 612.602787][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000e001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:24 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x2000000]}) 16:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x800, 0xb0700) ioctl$CAPI_INSTALLED(r3, 0x80024322) getsockname$packet(r2, 0x0, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0085504, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140019001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 612.833191][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 612.894852][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 612.914138][T19691] binder: 19686:19691 ioctl c0085504 200000c0 returned -22 [ 612.958983][ T2909] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 612.982265][T19691] binder: 19686:19691 ioctl c0085504 200000c0 returned -22 [ 613.154936][T19667] IPVS: ftp: loaded support on port[0] = 21 [ 613.197244][ T2909] usb 3-1: Using ep0 maxpacket: 16 [ 613.319202][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.347516][ T2909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.367247][ T2909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 613.467313][ T2909] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 613.476443][ T2909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 613.502241][ T2909] usb 3-1: SerialNumber: syz [ 613.523199][ T2909] usb 3-1: config 0 descriptor?? [ 614.228980][ T2909] hid-multitouch 0003:045E:87F5.0019: unknown main item tag 0x0 [ 614.236757][ T2909] hid-multitouch 0003:045E:87F5.0019: unknown main item tag 0x0 [ 614.246349][ T2909] hid-multitouch 0003:045E:87F5.0019: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 614.430091][ T3337] usb 3-1: USB disconnect, device number 91 [ 615.237277][ T2879] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 615.497231][ T2879] usb 3-1: Using ep0 maxpacket: 16 [ 615.618483][ T2879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.629617][ T2879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.645129][ T2879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x799}, 0x8) close(r0) 16:16:27 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x3000000]}) 16:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14003f001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0185649, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:27 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103b278bcf3f7f64262240593506765688f071774fdf3dd27b2aca34180d752f3fd533dfcc3e24902a655fe0617f8d28eb1c6c930b77aecc4eae1135c5563947c909adc4954e8cef9055091999a21dffa36f8af16f327c4331b9c87a18f364216322263c2c429f62468e827792a5a42416f6c43fbaff5f6fe13aeaf8f8c424c00cd98b5f47863173e318cff30000974235adfb62d2509ae"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x50000, 0x0) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x52181, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "078bbc"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 615.738206][ T2879] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 615.747662][ T2879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 615.755865][ T2879] usb 3-1: SerialNumber: syz [ 615.766852][ T2879] usb 3-1: config 0 descriptor?? [ 615.841666][ T2879] usb 3-1: can't set config #0, error -71 [ 615.848748][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 615.866772][T19773] IPVS: ftp: loaded support on port[0] = 21 [ 615.870901][ T2879] usb 3-1: USB disconnect, device number 92 [ 615.889089][T19771] binder: 19767:19771 ioctl c0185649 200000c0 returned -22 16:16:27 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x4000000]}) 16:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140040001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000100)) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:28 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x40000000]}) 16:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140060001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 616.159275][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 616.217882][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:28 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0)='\xe7\x92\xf9\xb2\xec]2\xf6/%\xd6,\x8a\xdc9\x00\x00\x00\x00\x00\x00\x10\x00\a\x00@\x00\x00\x00\x00\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80}, 0x8) close(r0) 16:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140094001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 616.350570][T19821] binder: 19820:19821 ioctl c018620c 200000c0 returned -22 [ 616.367424][ T2879] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 616.415823][T19827] binder: 19820:19827 ioctl c018620c 200000c0 returned -22 [ 616.440895][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 616.569808][T19773] IPVS: ftp: loaded support on port[0] = 21 [ 616.607325][ T2879] usb 3-1: Using ep0 maxpacket: 16 [ 616.728465][ T2879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 188, changing to 11 [ 616.751873][ T2879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 616.858032][ T2879] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 616.876620][ T2879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 616.917257][ T2879] usb 3-1: SerialNumber: syz [ 616.950450][ T2879] usb 3-1: config 0 descriptor?? 16:16:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0189436, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 617.668977][ T2879] hid-multitouch 0003:045E:87F5.001A: unknown main item tag 0x0 [ 617.676829][ T2879] hid-multitouch 0003:045E:87F5.001A: unknown main item tag 0x0 [ 617.695275][ T2879] hid-multitouch 0003:045E:87F5.001A: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 617.874890][ T2909] usb 3-1: USB disconnect, device number 93 [ 618.647661][ T9669] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 618.897270][ T9669] usb 3-1: Using ep0 maxpacket: 16 [ 619.017734][ T9669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 188, changing to 11 [ 619.032809][ T9669] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.117380][ T9669] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 619.126593][ T9669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 619.135672][ T9669] usb 3-1: SerialNumber: syz [ 619.146850][ T9669] usb 3-1: config 0 descriptor?? 16:16:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/101) 16:16:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400b4001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:31 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x2]}) 16:16:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)={0x2, 'syzkaller1\x00', {0x80000000}, 0x7ff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_QBUF(r2, 0xc044560f, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x400, 0x3, {}, {0x2, 0xc, 0x1, 0x2, 0x7f, 0x0, "a487b4ad"}, 0x1, 0x2, @fd, 0x1, 0x0, r3}) r5 = socket$pppoe(0x18, 0x1, 0x0) listen(r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close(r0) 16:16:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc020660b, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 619.205118][ T9669] usb 3-1: can't set config #0, error -71 [ 619.230962][ T9669] usb 3-1: USB disconnect, device number 94 [ 619.291367][T19898] vivid-003: disconnect 16:16:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1402c2001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:31 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x3]}) [ 619.322219][T19896] IPVS: ftp: loaded support on port[0] = 21 [ 619.338612][T19892] vivid-003: reconnect [ 619.358449][T19906] vivid-003: disconnect 16:16:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306202, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 619.400935][T19892] vivid-003: reconnect 16:16:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24}, 0xffffffa7) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:31 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x4]}) [ 619.506934][T19922] binder: 19920:19922 ioctl c0306202 200000c0 returned -22 [ 619.533123][T19922] binder: 19920:19922 ioctl c0306202 200000c0 returned -22 16:16:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400f0001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 619.787439][ T9669] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 619.935139][T19896] IPVS: ftp: loaded support on port[0] = 21 [ 620.037513][ T9669] usb 3-1: Using ep0 maxpacket: 16 [ 620.197428][ T9669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.197450][ T9669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.197472][ T9669] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 620.287474][ T9669] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 620.296787][ T9669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 620.305340][ T9669] usb 3-1: SerialNumber: syz [ 620.317096][ T9669] usb 3-1: config 0 descriptor?? [ 621.009513][ T9669] hid-multitouch 0003:045E:87F5.001B: unknown main item tag 0x0 [ 621.017745][ T9669] hid-multitouch 0003:045E:87F5.001B: unknown main item tag 0x0 [ 621.027108][ T9669] hid-multitouch 0003:045E:87F5.001B: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 621.222213][ T9669] usb 3-1: USB disconnect, device number 95 [ 621.997323][T18182] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 622.259435][T18182] usb 3-1: Using ep0 maxpacket: 16 [ 622.387884][T18182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.398986][T18182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.409098][T18182] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:16:34 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x300]}) 16:16:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306203, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x42200, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f00000000c0)={0x3, 0x0, [0x6, 0x7, 0x3, 0x4, 0x3, 0x0, 0x5, 0x4]}) close(r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)=0x1) 16:16:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=""/203, &(0x7f0000000300)=0xcb) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xc2840, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000340)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x10}}, 0x20) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) write$eventfd(r2, &(0x7f0000000000)=0x8, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r4], 0x0}, 0x0) 16:16:34 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8917, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 622.497934][T18182] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 622.507030][T18182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 622.517883][T18182] usb 3-1: SerialNumber: syz [ 622.524166][T18182] usb 3-1: config 0 descriptor?? [ 622.591198][T18182] usb 3-1: can't set config #0, error -71 [ 622.610859][T18182] usb 3-1: USB disconnect, device number 96 [ 622.650870][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.685350][T20003] IPVS: ftp: loaded support on port[0] = 21 [ 622.687989][T20005] binder: 19997:20005 ioctl c0306203 200000c0 returned -22 16:16:34 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x4000]}) 16:16:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140002001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 622.766328][T20014] binder: 19997:20014 ioctl c0306203 200000c0 returned -22 [ 622.790668][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0x9, 0x2007, 0x1}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306205, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:34 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x1000000]}) 16:16:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140003001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 623.026387][T20045] binder: 20043:20045 ioctl c0306205 200000c0 returned -22 [ 623.035617][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 623.062378][T20047] vivid-003: disconnect [ 623.084359][T20049] binder: 20043:20049 ioctl c0306205 200000c0 returned -22 [ 623.101356][T20044] vivid-003: reconnect [ 623.112201][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:35 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x2000000]}) [ 623.135921][T20047] vivid-003: disconnect [ 623.140488][T18182] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 623.178014][T20044] vivid-003: reconnect 16:16:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306206, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x413, 0x8, 0x6, 0x8, 0x3, [{0xfffffffffffffa2d, 0x5, 0x7, [], 0x1002}, {0x20, 0x41, 0x5, [], 0x1000}, {0x9, 0x1, 0x6e1}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r1) 16:16:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140004001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 623.342571][T20060] binder: 20057:20060 ioctl c0306206 200000c0 returned -22 [ 623.343584][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 623.385654][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 623.439812][T18182] usb 3-1: device descriptor read/64, error 18 [ 623.572358][T20003] IPVS: ftp: loaded support on port[0] = 21 [ 623.837418][T18182] usb 3-1: device descriptor read/64, error 18 [ 624.118395][T18182] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 624.407322][T18182] usb 3-1: device descriptor read/64, error 18 [ 624.807477][T18182] usb 3-1: device descriptor read/64, error 18 [ 624.927533][T18182] usb usb3-port1: attempt power cycle [ 625.637381][T18182] usb 3-1: new high-speed USB device number 99 using dummy_hcd 16:16:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000a001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:37 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x3000000]}) 16:16:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306208, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000440)={0x0, @bt={0x3fa, 0xffffffff, 0x0, 0x2, 0x9, 0x8, 0x7f, 0x3, 0xfffffff7, 0x6, 0x3, 0x5, 0x7fff, 0x8, 0x0, 0x1, {0x0, 0x4}, 0x1, 0x60}}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0x80, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x81, 0x3, 0xcc}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x7, 0x0, 0x20, 0x4}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1f, 0xff0f}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "394643d261ac36aefa028fc690ba4e21"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x5, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x4, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "173d9edfc2b09292b73f9363536fe50c"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2009}}, {0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="4a0317192fdf60fcce90f7fc09351b41099b4e6a883de557e8edfddff257c9e18b8c7841d8345f592cf709000000aa49102400078d6c257f53d5dfdb5800d144a032439c6106ab540816"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) mmap$usbfs(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x5, 0x13, r3, 0x6) close(r0) 16:16:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 625.787394][T18182] usb 3-1: device descriptor read/8, error -71 [ 625.815482][T20105] vivid-003: disconnect [ 625.826178][T20107] binder: 20100:20107 ioctl c0306208 200000c0 returned -22 16:16:37 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x4000000]}) [ 625.828027][T20103] IPVS: ftp: loaded support on port[0] = 21 [ 625.852911][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000c001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306210, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="120100000000000100000000090400000903000000092100000001222200098481037879b0735c8c802c1f84bd6e6b7c3555aad0499080d5905e59deaa89a1017a5a5872f52859889707821a878c4d4e6f74d1f9588cde95f5c82909221d37bce75545516d37cd976e25308d86b02fbef7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x8c, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xa4, 0x7f, 0x59, 0x20, 0x1934, 0x702, 0xfbc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x8, 0x5b, 0x20, 0xc0, [{{0x9, 0x4, 0xdf, 0x7d, 0x2, 0x9b, 0xf6, 0x89, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x60eaaaa4e6c1a848}]}, @hid_hid={0x9, 0x21, 0xdc3, 0x9, 0x1, {0x22, 0x86b}}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xe1, 0xff, 0xfe}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x1, 0x36}}]}}, {{0x9, 0x4, 0x8e, 0xff, 0x1, 0x57, 0x69, 0x72, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "c5e1e8a383e4"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x7, 0x5}, [@obex={0x5, 0x24, 0x15, 0x40}, @acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7, 0x24, 0x14, 0xb3b, 0xfff}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9, 0x5, 0x7}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0x1f, 0x80}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xb5, 0x1, 0x9, 0xff, 0x6}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x3f, 0x3}]}, 0x9, [{0x48, &(0x7f00000002c0)=@string={0x48, 0x3, "b7b90ef5594347fe372f7220d4653f43a9d46af6f8d1d34eef0c1aaf1122badb7d8057e4f22c34bf6c84b28c9f7fa3a319a201b008ee299939ffcc7a99d341489f93f6f746b8"}}, {0xdf, &(0x7f0000000340)=@string={0xdf, 0x3, "160d2f6001d34ce1404eac2e8b7eeb06ef0f110a2c7c5ac3f2a739cfdc725e78ba6a8d0a8abfca1cba97371aba4732730074a1b61865d1f311bdf7180a5f6ab14aa037147da43b9400949f9e24070fea0ebd8fe548c0ae0efcd37e86d7ab2d6e1038ecf9f35a8b54bf3705d3ea7592e2f7f48d3571fae6e9ac069f7cf66f3aede6657344ec1d8d9469ad367a8a826abfe392e5c49fa45bbbabca9d15ff7bee99e77978ce4155054bde556c0ff2e9fc2899e212ba07fa79a88f9d93b3e1f9f7d5278406ffdd93daea03e237844fd95ff3244886852e0315626a923e4382"}}, {0xb7, &(0x7f0000000440)=@string={0xb7, 0x3, "aa454e2e2d65575ca273b81cd02cfc24973aa0232ea5f4d2bd1e65ab5cf7519d07ee7edc89b28f4dd42a002a32c60bbe0116ce50f2fce68dd88aa097b3b0e7d8b395ee8bae5eacec3f548233f427109865a7be8247b820bccf3e20903b27462d9b706deb4bba9238ca348cc0f99fa5d8e1ed7242a452f584ef252a846c35878bca503a39b582913a0cd2bdcb21a4ea497ae1a7621a1736abc294b50932215ee643cf1207a73d3420a4c2fd634c5ef8bb8c1820e646"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42b}}, {0x24, &(0x7f0000000580)=@string={0x24, 0x3, "49af03ac77bad1f9ee680bb3ae3ebdd44f2ec59c7f57e0e8e63ff43c41a9f5d40497"}}, {0x7f, &(0x7f00000005c0)=@string={0x7f, 0x3, "809a8090c7bfbed05044dd6b95d24bac52d5b9c47ca82281911e3166e04cbb57d86fd6219dce794d34797c641c9aa4bc8f0d83fdfe68e24a27cb6fe44f8974a3189f51350aa638ea7f0bd294d361309d529a71fd45bfa2bae8f5b861267aadb263c10a928e126fe29250d921ffc007e680c6903b08c06084f8c10ee568"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb6, &(0x7f0000000680)=@string={0xb6, 0x3, "43014b75b8efa3a70fadd439e3c0be23e4a1a1b37aa4158a5c449995f7cd94fca82acb09e9451c43db0e785405a1717fd4af6ec57cdce77d3396ff9c5b34e4fab8fa2c39af22671596ff2fcf09bc5b7b472461ac5197256b1a0713676df43b0509a1c836db57a428e231db61fe0d39927c0c5502b0121139d7dc737466362793a1dba313c595be12e4e50dc57ce54d533afe7b58f5173c0b90e4ba7d642004dd2d5bbc47665b3b543f51e7a462f2d4c52c89e58b"}}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r4) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x22, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0xdeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x9, 0x20}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0xb4, 0x40, 0x40, 0x40, 0x6}, 0xb2, &(0x7f0000000840)={0x5, 0xf, 0xb2, 0x3, [@generic={0x96, 0x10, 0x1, "1ff4bd8efe53587f6094670e5947fde1f1fa1c53be22496e4fad56be84b3e49c8f319945561c27f86c9820e8e46e193ed6c19e57a93d868b75d1da0fdf1559e32ca8e776894c5ba59546060e33dc671dce246fb25c919b42982845cf97c2ecdde68754478afa784021a92e821003fd861cfea47834943c96dc70b55fafb84d2fb6510d2b4bcab25ef5bf961f185fb7519c45c6"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f7de945a0b2dafe2c4db6ee0be60b584"}]}, 0x7, [{0x2e, &(0x7f0000000900)=@string={0x2e, 0x3, "0617def30943b692534da0b7e277632e2b89c1a296ef3a3b2fe574b1bb79fc4aba6f15b1385e5931823138f2"}}, {0x36, &(0x7f0000000940)=@string={0x36, 0x3, "fa7706a268779e90e31d533fd5f5bac45998712cf6b907b2d089828bdba4f1f278bb21d927adc9602f8f34cf24448c9bc6cf273f"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2801}}, {0x89, &(0x7f00000009c0)=@string={0x89, 0x3, "71f2e8781bff598cdc57f3083120560eab145b9d0d8b4920d34a1d81a88b908bfe15448c8e6bf87e2bbf943f80942ed1074aded92b62580f7b8ed80be0b597ebca72272d7aadeeedcd52184b6fc764eafe2b2fb10bfdbe1a5d8ab83e5634cf8465bc9f1b03a8d5637c762649f3dcd6f8e12fd9af148a43814cf928418bb93bd64470de17c04ab0"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x407}}, {0xcd, &(0x7f0000000b00)=@string={0xcd, 0x3, "ce92f8420c0a7ea40328aabf68e1b7d81edf21f6793b7985e3f444062f5a1357ec60bc6110bedcd1a9cf11076aa24b9923659a2ded0a66dc9470422ca2387e82d6d07042b00ddb99c74d2f4edcc2cb328bb1385a5d278b417305a5b199f8324163646e24054e166e35f4c70de8abb53b01854d3ac0be60c0a791fc06791bef8125fb3ff70c97409ef65ddb94206f6eded03000d9a02e9a790817349a83b45ab291e5b621be9f88eb60069e36598bf6c01ed5d5d5edd2b0b33e8895709bca5b44ac5106fce7fff9fd305547"}}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 626.007825][T18182] usb 3-1: device descriptor read/8, error -71 16:16:38 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x40000000]}) 16:16:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000e001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 626.139618][ T9670] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 626.141132][T20142] binder: 20133:20142 ioctl c0306210 200000c0 returned -22 [ 626.190963][T20146] binder: 20133:20146 ioctl c0306210 200000c0 returned -22 16:16:38 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:16:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140019001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306214, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:38 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x2]}) [ 626.388403][T20156] binder: 20154:20156 ioctl c0306214 200000c0 returned -22 [ 626.407905][ T9670] usb 2-1: Using ep0 maxpacket: 8 [ 626.457372][T20156] binder: 20154:20156 ioctl c0306214 200000c0 returned -22 [ 626.507454][T18182] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 626.537963][ T9670] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 8 [ 626.542760][T20103] IPVS: ftp: loaded support on port[0] = 21 [ 626.566724][ T9670] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.628963][ T9670] usb 2-1: config 1 interface 0 has no altsetting 0 [ 626.642386][T18182] usb 3-1: Invalid ep0 maxpacket: 1 [ 626.654641][T18182] usb usb3-port1: unable to enumerate USB device [ 626.828028][ T9670] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 626.837132][ T9670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.868792][ T9670] usb 2-1: Product: ᤗﱠ郎ﳷ㔉䄛鬉橎㶈埥埲貋䅸㓘奟 [ 626.888203][ T9670] usb 2-1: Manufacturer:   [ 626.893274][ T9670] usb 2-1: SerialNumber: ц [ 626.938756][T20105] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 627.179272][T20098] vivid-003: reconnect [ 627.297321][ T144] tipc: TX() has been purged, node left! [ 627.308481][ T9670] usblp: can't set desired altsetting 129 on interface 0 [ 627.328366][ T9670] usb 2-1: USB disconnect, device number 3 [ 627.457393][ T144] tipc: TX() has been purged, node left! [ 627.637655][ T144] tipc: TX() has been purged, node left! [ 627.700582][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 627.807338][ T144] tipc: TX() has been purged, node left! [ 627.977316][ T8292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 627.978266][ T144] tipc: TX() has been purged, node left! [ 628.167321][ T144] tipc: TX() has been purged, node left! [ 628.238327][ T8292] usb 2-1: Using ep0 maxpacket: 8 [ 628.327507][ T144] tipc: TX() has been purged, node left! [ 628.367442][ T8292] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 8 [ 628.381290][ T8292] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.394797][ T8292] usb 2-1: config 1 interface 0 has no altsetting 0 [ 628.487338][ T144] tipc: TX() has been purged, node left! [ 628.607950][ T8292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 628.617021][ T8292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.626203][ T8292] usb 2-1: Product: ᤗﱠ郎ﳷ㔉䄛鬉橎㶈埥埲貋䅸㓘奟 [ 628.635521][ T8292] usb 2-1: Manufacturer:   [ 628.640901][ T8292] usb 2-1: SerialNumber: ц [ 628.662431][ T144] tipc: TX() has been purged, node left! [ 628.679518][T20195] raw-gadget gadget: fail, usb_ep_enable returned -22 16:16:40 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x3]}) 16:16:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140060001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8919, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 628.816921][T20206] IPVS: ftp: loaded support on port[0] = 21 16:16:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140094001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 628.857400][ T144] tipc: TX() has been purged, node left! [ 628.857524][ T8292] usblp: can't set desired altsetting 129 on interface 0 [ 628.888063][ T144] tipc: TX() has been purged, node left! [ 628.896201][ T144] tipc: TX() has been purged, node left! [ 628.919513][ T8292] usb 2-1: USB disconnect, device number 4 [ 628.991199][ T144] tipc: TX() has been purged, node left! [ 628.999724][ T144] tipc: TX() has been purged, node left! 16:16:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:16:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:41 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x4]}) 16:16:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r5 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="030b0000000000000000100000001c00038008000100ffff00000800020001000080080001000100000014000580080001007564700008000100756470003c0004801300010062726f6164010000002d6c69016b00c07c4e292010f5b04301002400078008000300010000000800020001000000080003009f04"], 0x80}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@initdev, @loopback}, &(0x7f0000000240)=0xc) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r7, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0xcfdb1f136db14405}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400b4001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 629.104790][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 629.118963][T20245] binder: 20242:20245 unknown command 0 [ 629.124539][T20245] binder: 20242:20245 ioctl c0306201 200000c0 returned -22 [ 629.155237][T20245] binder: 20242:20245 unknown command 0 [ 629.169006][T20245] binder: 20242:20245 ioctl c0306201 200000c0 returned -22 [ 629.178970][ T144] tipc: TX() has been purged, node left! 16:16:41 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x300]}) 16:16:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 629.209429][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) read$hiddev(r2, &(0x7f0000000080)=""/44, 0x2c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400f0001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 629.337514][ T144] tipc: TX() has been purged, node left! 16:16:41 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x4000]}) [ 629.381108][T20262] binder: 20258:20262 unknown command 0 [ 629.386904][T20262] binder: 20258:20262 ioctl c0306201 200000c0 returned -22 [ 629.433331][T20262] binder: 20258:20262 unknown command 0 [ 629.442022][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 629.449326][T20262] binder: 20258:20262 ioctl c0306201 200000c0 returned -22 [ 629.515832][ T8292] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 629.527426][ T144] tipc: TX() has been purged, node left! [ 629.648904][T20206] IPVS: ftp: loaded support on port[0] = 21 [ 629.707446][ T144] tipc: TX() has been purged, node left! [ 629.713636][ T144] tipc: TX() has been purged, node left! [ 629.742079][ T144] tipc: TX() has been purged, node left! [ 629.762848][ T144] tipc: TX() has been purged, node left! [ 629.831149][ T8292] usb 3-1: device descriptor read/64, error 18 16:16:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400c2021000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 630.207765][T20302] IPVS: ftp: loaded support on port[0] = 21 [ 630.271637][ T8292] usb 3-1: device descriptor read/64, error 18 [ 630.453513][T20302] IPVS: ftp: loaded support on port[0] = 21 [ 630.547406][ T8292] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 630.857406][ T8292] usb 3-1: device descriptor read/64, error 18 [ 631.257405][ T8292] usb 3-1: device descriptor read/64, error 18 [ 631.387618][ T8292] usb usb3-port1: attempt power cycle [ 632.097575][ T8292] usb 3-1: new low-speed USB device number 103 using dummy_hcd 16:16:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804f587000000001e01090224000100000000090400000903000000092100000001222200090581032884b9d3671e62afed64beb35ba85799e87a290532421b708c1f04abbdf6dea9eb9c7e31795b5700a16aa6f6c4b3cc1b0c181cc46ce180e4e932fdf085babae2b359e00ca4a5a00d779e0e5447f3074c1860c6cfe28128fa19a6ed7f5be925e8691d5b8e9c4278b079462f6107fee3b956607d4bb69c8cd405465254f2241ac5fa0d7b7b7ead558354d16a3b490859c322aee7bf25f311eb9a015d5f55a5c620c7c1df81082c23ca60"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x9, {0x8, 0x61e, 0x0, 0x6}}) 16:16:44 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x1000000]}) 16:16:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000031000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x2, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x440c4, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000100)={0x2, "02b5"}, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) 16:16:44 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 632.237492][ T8292] usb 3-1: device descriptor read/8, error -71 [ 632.272245][T20357] IPVS: ftp: loaded support on port[0] = 21 16:16:44 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x2000000]}) [ 632.282150][T20360] binder: 20351:20360 unknown command 1661665280 16:16:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000a1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) listen(r0, 0x40) close(r0) [ 632.367342][T20360] binder: 20351:20360 ioctl c0306201 200000c0 returned -22 [ 632.419255][T20362] binder: 20351:20362 unknown command 1661665280 [ 632.426504][T20362] binder: 20351:20362 ioctl c0306201 200000c0 returned -22 [ 632.457556][ T8292] usb 3-1: device descriptor read/8, error -71 16:16:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000c1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:44 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x3000000]}) 16:16:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vsock(0xffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x1d1883, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) openat$loop_ctrl(0xffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x200003, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)={r6, 0xc9, "7e9d10bd6bb20cbe833574c17688bb0b102a530cca57e8324ff040656267c7be5247fef6d713a96877399a3c635f7f1f5aa79da0bded889b8819620eec34c68119876c161b9a8676c3e140b3344e47dfb05ee6745ff493eb97d36585ba83ddfef886bf28b89a9ae3e8faeaa432c48ef5b93d41275ebfe2d7fda114391446ea03ba4664db4846930b6182129306e33a2970a9565bf6db699efcd77404dd6e5758666ce447e422e9e75b4790380c7c4a7676d87490ca332bb01631746ddcadf18d61a3986d35b8e76ee9"}, &(0x7f0000000140)=0xd1) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 632.735368][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 632.776587][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 632.944392][T20357] IPVS: ftp: loaded support on port[0] = 21 [ 632.957621][ T8292] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 633.068053][ T8292] usb 3-1: Using ep0 maxpacket: 16 [ 633.208071][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 633.227343][ T8292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 633.257784][ T8292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 633.357587][ T8292] usb 3-1: New USB device found, idVendor=0458, idProduct=87f5, bcdDevice= 0.00 [ 633.367108][ T8292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 633.376457][ T8292] usb 3-1: SerialNumber: syz [ 633.383787][ T8292] usb 3-1: config 0 descriptor?? [ 633.418450][T20364] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 634.091013][ T8292] hid-multitouch 0003:0458:87F5.001C: unknown main item tag 0x0 [ 634.099912][ T8292] hid-multitouch 0003:0458:87F5.001C: unknown main item tag 0x0 [ 634.118429][ T8292] hid-multitouch 0003:0458:87F5.001C: hidraw0: USB HID v0.00 Device [HID 0458:87f5] on usb-dummy_hcd.2-1/input0 [ 634.293895][T20364] vivid-005: disconnect [ 634.301421][ T9721] usb 3-1: USB disconnect, device number 104 [ 634.313319][T20363] vivid-005: reconnect [ 635.097550][ T9670] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 635.367596][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 635.508028][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 635.520204][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 635.531858][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:16:47 executing program 2: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xffffffffffffff3f, @lang_id={0x0, 0x3, 0x436}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:16:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:47 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x4000000]}) 16:16:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0xfffff800}}, [0x3, 0x3, 0xba01, 0x7, 0x0, 0x6, 0x2, 0xff, 0x1000, 0x1ff, 0x5, 0x5, 0x80000000000, 0xfff, 0x1]}, &(0x7f00000000c0)=0xfc) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x20, @rand_addr, 0x81}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES64], 0x1) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x6d, 0x1}, 0x7) 16:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000e1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:47 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 635.617992][ T9670] usb 3-1: New USB device found, idVendor=0458, idProduct=87f5, bcdDevice= 0.00 [ 635.635407][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 635.644198][ T9670] usb 3-1: SerialNumber: syz [ 635.692964][ T9670] usb 3-1: config 0 descriptor?? [ 635.720231][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 635.732403][ T9670] usb 3-1: can't set config #0, error -71 [ 635.746324][T20456] IPVS: ftp: loaded support on port[0] = 21 [ 635.753782][T20460] binder: 20454:20460 unknown command 6490880 16:16:47 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1, [0x0, 0x0, 0x0, 0x40000000]}) [ 635.765920][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 635.782941][ T9670] usb 3-1: USB disconnect, device number 105 [ 635.801373][T20460] binder: 20454:20460 ioctl c0306201 200000c0 returned -22 16:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000191000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x1c9440, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000240)={0xe6c16a8b, "e1e2a4763dd5d09955aa3269f01929d71a1054d2232ba9c7d319b5224bf3d693", 0x1}) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101000, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x133) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r6, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', r7}) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20048004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000280)=0x5, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:48 executing program 0: r0 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x68402, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffa, @rand_addr=' \x01\x00', 0x3f}}, 0x24) getsockname$packet(r1, 0x0, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140b, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x8000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x4}}, [0xf4b, 0x80000001, 0x6a72, 0x9, 0x3ff, 0xff, 0x10001, 0x3, 0xff, 0x100000000, 0x80, 0x6, 0x6, 0x5]}, &(0x7f0000000240)=0xfc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) write$binfmt_elf64(r3, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0xb7, 0x40, 0xfb, 0x44, 0xfffffffffffffffc, 0x3, 0x3e, 0x6, 0x3cd, 0x40, 0x3dc, 0x1ff, 0x63, 0x38, 0x1, 0x6, 0x6, 0x1c9}, [{0x1, 0x8b92, 0x3ff, 0xce, 0x33f, 0x9, 0x1, 0x6}, {0x7, 0x6, 0xdad, 0x4, 0x95, 0x27849e54, 0x0, 0x1}], "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", [[], [], [], [], [], [], [], [], []]}, 0x19b0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x782, 0x20}, &(0x7f00000002c0)=0xc) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 636.029285][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400003f1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 636.073315][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 636.187397][ T9670] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 636.412961][T20456] IPVS: ftp: loaded support on port[0] = 21 [ 636.477579][ T9670] usb 3-1: device descriptor read/64, error 18 [ 636.887730][ T9670] usb 3-1: device descriptor read/64, error 18 [ 637.177481][ T9670] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 637.457569][ T9670] usb 3-1: device descriptor read/64, error 18 [ 637.887682][ T9670] usb 3-1: device descriptor read/64, error 18 [ 638.010368][ T9670] usb usb3-port1: attempt power cycle [ 638.727914][ T9670] usb 3-1: new low-speed USB device number 108 using dummy_hcd 16:16:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x400000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x2a) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:50 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 16:16:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x5, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000401000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:50 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8924, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @empty}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x4, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0xd1ba) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) socketpair(0x2, 0x2, 0x1f, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x1, 0x4) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r8, &(0x7f0000000100)=ANY=[], 0x1) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000200)) [ 638.837503][ T9670] usb 3-1: device descriptor read/8, error -71 [ 638.857067][T20545] binder: 20540:20545 unknown command 99 [ 638.880351][T20544] IPVS: ftp: loaded support on port[0] = 21 [ 638.911177][T20545] binder: 20540:20545 ioctl c0306201 200000c0 returned -22 16:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000601000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x9, 0x80000000, 0x0, 0x0, 0x8, 0x4, 0x1, 0x6, 0x800, 0x1, 0x0, 0x2, 0x1, 0x9, 0x8, 0x2, {0x3, 0x1}, 0x3f, 0x5}}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) [ 638.960437][T20553] binder: 20540:20553 unknown command 99 [ 638.966223][T20553] binder: 20540:20553 ioctl c0306201 200000c0 returned -22 16:16:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) io_submit(0x0, 0x3, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x6d5f, 0xffffffffffffffff, &(0x7f0000000300)="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", 0x1000, 0x8001, 0x0, 0x3}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="7df58e23316645be809a9c", 0xb, 0x6, 0x0, 0x1, r1}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x6, 0x464c, r2, &(0x7f0000002380)="ffa1de94f6493c7ca6ad53b9ec4f13630660fb34a9a8c7df0a79b58a2164feafd0cbc0088314a82853e4b6043f5cc9c9e7884f88a7cea34fd05f", 0x3a, 0x101, 0x0, 0x3, r3}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r6 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x6, 0x2006, 0x7, 0xc, 0x7, 0x0, 0x7}}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r4) 16:16:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 639.067561][ T9670] usb 3-1: device descriptor read/8, error -71 [ 639.093919][T20575] vivid-001: disconnect [ 639.151600][T20570] vivid-001: reconnect [ 639.154137][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.158649][T20575] vivid-001: disconnect [ 639.190801][T20578] vivid-003: disconnect [ 639.196048][T20570] vivid-001: reconnect 16:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000941000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="9ad3000f784f80aea0258a1295e88d007fcb3431fc77539d631d2e436565d7552a6e71326e315c773cb3a4f44db85cb31dd4413bf82037e6c486dbe7d770e9aa350cafad8e9cebba684de75ee749a08a0af4fcf57591cb831147a77a70c621815768ba7e5be8d9c83bc11184514e0cea5651268984a58b0e61d4d7708a7f454cbd806c48303818a180d5209ba49da22bbcd4c929cca27b0de1b332bc6fb2f19541cbb81f89747e9a68a50fbef55b867e9c884b196d5ab389ab462f1c8e22f00b0b9507ea16f06b", 0xc7}, {&(0x7f00000002c0)="a2d4bb234c0dae3d676b3c387611843fca13c6aab800596391c717d92fd4f06ae8b1218308b1a5f368deae15daf53f8e936af6e237f79891b1dd31ef27dbfd2cb04dfad5632a718a3de437977ea23d16c9894fc460f88cebd2ad34bc8ad6bff8fefd92e2e5e8935254c45c97ad1f7b9eca04174871b7dc9df3d0bf16876c24bac60e5166314dd50540d823d22219f43dbc1704680acb4702d1", 0x99}, {&(0x7f0000000800)="0f9ccfa21a9393505c6541546f5e23f5cd78783580913777c67327cff141084dada0229e21bcbb8e10a1ccc1b896a363a696a295258561ab479785dcdc8699480ef48ce8e933a8523caae20a96ca31f0958b0eb4cf8e4871d521d516160bce147296f7c027aac71099277e4d4d58090afbd3e7469dd291e53036776ff87ff6ec6a5f315e5cd7db2dc1d2c60a4096ee6140b5ca6fa8fd40bf3573f50c410e0154d0037be9fe373d8091fb6dbbd3d1ced613159510b024ad69d7d7b1f0e9123700fc25240c41d26548e75f601a62b189c97720926c6dbe0241748a9ba9f68f110cfb6448ef0069cd874121634f32fddc6cb311466824f2aefa2dcb21d614b827a481c23e7e505100926989977b33cdfba3f172bafde580f96aa587d4b286dd8f7f6c0a2b1d29ce4a932be448690bea6140347126fe86f92da43845ae7b6e46328e1e0ee48af30ccf0136518c82d1521764cb203b336259f9cad393129d89f2b30ab9d04d203820dd555b2c73fc9f9bb05a23d36bce30b2290d5c57a7ea967d9022ab7ca907e241703310ed0b4198c42172f94b12631acb8acdc2039d7e2ac90a6dfca95ad92e9d58c63dd2fb4026ae68b4de7c4aab058c5a2d8b9d9175a6eac13addeaae37e56c47f9778615185c254aae128165ee1f087d1d4840c2f1e2798bb99d678a7a1d8f410af21a7e0487a5a5ec013bf2dc59f74b047fdab2142c64ec0348b03df6b61fc811249e565eba4c4fa646bfd907089f16608af5756a29688a857ab06bb8fb7862df5238d92877e3743d9ee8a9f6224017bc4b07813b39cb00e8ac592bec0cd85f5ef20e4bee54921955a8134ca0a1f774d9cd7d535d0621a627019bc256c7f5a9563014e882fbace781823205ceb26f98a4c982fb643da8e95efb46728c8bec403aae281960813ae137b94e11ce8d43edb7ca96cae7c7310d2f668534fb97c31dc777a50e34485bba9ff90a5d2a68770f2de713e8124bf5c3db4ad53d7155cc9cf45409ebdfcdb0f4bd0dc4304c0a7651772feef50d985312b50d43dfc1c6fb363fef0f4a0387d1dacc6e68d633785d4f777ee826bf1289f975ef7d24f0139777dd00ed9686e5fb3a0019ddc1ed1a63899fe9d68f3f71f24d4ccc6bcb1bda6de7fdc0ea10d71bb23101a50c1cd877fdb9d76aeee1d0b788f070a1e6d8aa5fefc859ddae57b3391537b4f9f2c250dfbad28d2a13e45fa67c369b17e7919cf2a28add6265f9872b01c4979abb99a8d6c1604fdd04c76f5f8b2b548cae4f2f9cfc03c38811ec074e9ee81dcf2244f986b891797f5da488a6b4c9ff459dd905da5c45230956189b39df95d84fa2b99754908ef15a89429726fc65736f462a964a46cd6a595b0f87adfc4fe6aeb5a46d237edaf94bfcf4815c5ed2a039b6cc138d7baa61653a2f8dd2b9c50c011fa6fa8c51c8f9428d8d74cc923ed775c94105d1d0238d497a284c6e7b3dd7f23a28297d6ec4037a92623d70a73518eac815a759615d0025feefec65bba05fce3159eb24588b303d83dcf351a76ccf6830873a68b908acf1e8f369755c75f1ab94c231a1abf3483490c2841726197f6437e9796fa8cbf72b81729eacf6237d5af1ee9a3b080314d3d8cf22f0b5863e480574942139a0b387b72c3e52d4c9ca3c35a47170b4b84ecb0a4d25d24f879576fb0f50d1e6178387cb4bf91ac0097112913e7bfd4f3613a15db41ebde006967412f8818dfee7be06430b3e440d7de8a57514dc05e2eb97ec55bf4d30965a4b2c2142305a64b88922645c76bc3d958cef4b8459577b3374f82f22f7bedfe92c91351a3ebeaa183f9f50c1d6cf863137e1d3f3aa7ce0fe0ba0328d7441315787ad2fab7ef61a62190d657130ed656442dc1b14201eabd98dee1a0b873f7770aea2adf220e65a977a3f888664c42c73db373f630097b731879418a806f26fd2656fd084d6c81988f435ca16a87f5226335d262503ddf847b4cdbbc1e391f942efe9260cc9082306c3ffe4afebd522b72c4b64ddeb92db100aa26988e3c742456bb114df0460380e96fc22bd873b09038088394cef0aa37342966b2bf275515b2159a42e311d872c99799ae4df208177a0520ebacf42ee4dc5c2ceb26bca70610a96f5a5b1d909a674a8d95c0eeb18b42a6e701ac8e8ebdd38e6c6ec032a863ddb29c8515fb69d9f3ccb10cb5cd654b839ce4bcd6fcf4c9c73c9e2e8e8d235faa17e0c693ef0494a5866b0ba3a719118053d529dcffdd013ad1502e7cd8ec0069ef8a82ea29bc80c3ec81da8dd41058371cd49a87f71af53da07cdfd53f60303e9a4794434d0bb447b01bd6416823046c59f98fa02448d1d03869808874fb56a11fb72cd7f653af86db3bda7279e315810204311302194544447dbd7019342f11f5cd29e45a59b8702f395d2fd403c34f1ff744681af54804226bea6d5ad558968b771b2bb97d69a9ec30809d7e898cfb612483f6939209b007149bdd595a6bfc0a5c6a2dc08e2a1d57dee0d0540933a9e3f3a6615659157717ef6fe2e5d72ae2b267dc0ebae006e640331bf07c333f8506c67434eaeecb04099802f883cddeb2c4bc7cd5b6eb60aa3b6d5202cf6501d9f1792e96f21dce037ad26fdead1ccdc45277f82f834b65935127278a30b244cf5ea7d02861dcf3d056eea1467bc2a3115a7e888662a89eff22bc9a3cdda283be4bc9824c115cfc7e5ad8e32a648d9b7f4f54b16f01ca7a62a68f7c9f5edb4f7462d0f93ec2a3ec7e787be44e79e0fdffbbe1363f88bb90e94cdce409c2d071d295ebfd236fdd6221c1b9b9bc56c12a2a4c1844a0e9b3748b60d3d662628d488e68edd758fb4de8b685a85ec9ad02b87b8dc1f11488d40e49be4203493f74cd30a2483b135b719ed433e05d2d44786feebb31f3fc74d742853943c7d393860f33664726ccb8f214205cf2f2335591f5451f59b9861d5db862adb7e604f0ab47e3d3a06960f49bb7ccc716940eb9d585ab394bc43c278c75089100a34e90386f64ab541476be311ee3ffcff75a22a49ff76bd3bdcb923bd0b09153a46ebbb74630061755757b3c6fdb8d413b17602d4c9b9f126d6140b5f272e9567c9a33760def546921b13c13055bc2c4fc557b5f353f0ef5cb12fb4377d8f05309c86ec2281ad456793d5a7de941661ca21369f30f0c2a2a3f4a3f2415124d97fb11df5b3d8413cbb868f9cb83ace4e15c5b6db92e583595c5cdacaad4c3e2502ac8acc293ca8fbee4f33dce1842b77bc22c8d5e96c2fddc3c957d13f1be0d9110312117c77fe5ff9a0ee1cceb64e123b122b8fc1c8aba8172e04a129c0060ed9060ccd28d666993505d28171dbf7739953f5f6c9742403dde29ef2eb91f9bb7e6e817fd7f69aeefbd2a954cf39ce800f39915cb1b21dc8762df66b5275f271bc0739d5229a6cde01898ba6d4fda48944c282c9a6a1afc72ed0c50dbd6ab38df540a7c71f73e14cda95f8f1eb97d55493519b6f14a50674c88b4fc91b65672fa4f3d17c02e83d6ef2e2cffef23cec7a199759b01e382895cdcebd5f96d1bfdf0597fb5eda15ad5ac6640973b926ffb20b26faf6ada8cd8d53aca23743e2a3c6170bb26ad3d91392ec4986199295d4fd6ae94b9aac24fbbc5fe7dbedeb7551f9b7584fcff212cbefb0fac62df35b367b74d66f25b3213882aa083b266484c48c78613aff17a757881ea7e3e32c911a8bfa74d73855e1b285ab7e9213660cc018a72c4b42c9d499a8b5139ab7e02fcfff8e53b6077dc3a9b92dc21f1e7c23ce0afe4871f250e8178f3542bc17ae57452194f160592973900776625e662cfed923e994cc3747e4dcb65d3e1a818a8adb1ccee0ddff21d3089d909d0ebf4175a7e0897c5422665f5b47bc346e60b85a6267a5471d1a7b78a6784bac058c09fb5126c10552ce141e999dec2481845c4fa6d3917b9ad0289407d331db6f699be8bb667caf5e5bd5a2ee60a8676dd28cff0ff38b6fc0a6bdc4c86f441cfdbd97229a0499f0d66d1b59696250348fb98201d71c1beef780c0b4b56ee453ec077f1734b62d92cb23fdf55ef4083aa4f46133d3da512e3dcce59a01b4e5f871912f6ab71d3885400075fedda1d5de5a749792837c3a6f0134aef9b15c710ce4d9d3c008e002a064327e7c23a25a1cdeeed5cb35091d29d732bafb912ebe39e3e5d8b4661f28a1bf892f900cc50c49e4d04223717276df8a96ab6be7b999fc30051284455a8b4f5fb4f6bbc103703af1ddf910f6b6191bd906d48328d274b29fc1d6abcb1f6ede1c40b5e756a702d652d98aae8596e944cef970c4e5c86db2323eee10dd9b133842b94309e0e16929cc5b00703d4fb7181e7200db17b7ebf7318838f42eb4e75decc38efb32bb51131aeff9839cb49bf3a1f5a643ee37310d93268b41e0dcb3174dd2956d0f7bd3eec7a62e7eca40dd278878cbcb82b1a0ab71e7d604faebe5049910a5f82deefd6b12032603682107831fed2570ba3c88b0cc45eae98c3bd5893ff44679e86157383ad7340a3c7db772c61853b7feceaa964243739957ad6b5729efda1284afd5a11c1077f3406093ffd9156be216b8439e5d4adc033b199fc221536a44149dcd33b41134e283d3ad4157dd789f75efc590586d01c71af4ff8a0d29eeeb135d1430ca4d181ccd6011cf3846b445eecd09613c7fd863d16f2ab67b16de4c7a43068733bcc9ca2dab7cf038648d4ba7717e77e90ed1a851c6cc0c3a85d25c23d3eb5958eae39b5bd3fb0578673b34747d67569f24eb4ba95db9eec1b61340e1db5bb292f075321471584ee775679c4140574257628feae446ef3b825e1bba2b2b190d7efde7e6f8855ba6aa56d46e67710afb29a926c0070112def13a468ed30b70186a4e47c105a729cc0affa9fce7cdb54340b9ef69c1690f8295c40eb2ab06084e8aa3764773a9dca8230f89dcc669a847334b7b2f1078e6d4ff4f144884ec969e13f4dc607f7689a1f6cf4c1ca185a9b10d87d13dc386741273d6599b42d00ba47e2d3836d0371ed7bdc7257f19d296f716a2017f3bf502d05967d7c10bfb17ee317fa249d6484eb54c2682c6061340378d46410e24b8fbdca52e204e4e17ab7055e21ec75e6ae1a5120e09fb2e97868b1b2f96afbacab217452d4f92dc7653ba3029d370e292a288e8317af9084f8d8df1810052cd28aa9b082b7f487eab6a249e58d3cc399c5e0eae8339327116234b96b6f1169adfe347693952072ab98424ea232cc274a2f5b4d3977e35c60419043ef68f289eb9be769f9f6cb877babb7cea6e38b9a99e9197fb618f91634bb27a3661a8703259ae75b9c908b7cac4d5ba4b594ee35117fb05c125bfcf840c9d62e4fdde689b5500c8963d49357ef8bee38942920eba7af93b2bc78d5769ed664ee7f2c790e43c8f48c698daaa2fef74b2088e9642e0cef5dce6c44aee794f9a74390e82de63760a7008b76a9663d347f448c228c4e2d2f952b91dce963e14a703de56a939bc5ef5efcf01f91d5842c851d8334b6310cb99eb5ef9723e60e6d89039088da4df0d491d9ec67ef53d0fd7c14aba4b2efe4a18e3ff957627b9fd2253327000249305a9989380e05d065d707b3579514dea95e45baea56ec684920f2449d66fd6202e91b66ae7d75f1121b7abf5b328a499f607a6ec073caef9cffd12df79581c0099d914f6161bbbbd7d5930771d47a0f68dff58cc8e387028d4bffe64711956e563f5ec3f08b393daf52508b12bbfe410c4210ac73f393002333cfe9d78ab5378cafd8eff3a79395e723cf0f15e393b3ac0e5b2585074a113", 0x1000}, {&(0x7f0000000380)="fe83bda6bac6a2f52bfa0cceda0fedad69156e0255ec17014055d40b1c0c85547b1a00ec4b57e46d2913b9106649b92630178c7a71db35b2b6f48013efef3adef3dab38659129cf35336ba7e3977d4090fdc5263ed2dc29543218c84097d4764078bc870e6f926bd121fe4c53f646e783551385e8f75aabba79d7b0ef48ce88babcb280b179cad2988fe374a3cd84c404e1c465169c2b779e8e5e1e0ae9fafa82df606f6cc4491", 0xa7}, {&(0x7f00000000c0)="4fbb5963f49c6ab24692b95fa7879730498dd1e0c8efe76933e17fd9d568921e956229adf9aa2290348ef9da18c984bd3e7a98f3fa63fe41535d9dcf3ac1aa34f8b1ebbdb0266cd53255f10962f9f08fcbdd8411ec72529ace6b94e8369f7c60073e65e99282004d660ebe", 0x6b}], 0x5, &(0x7f0000001800)=[{0x18, 0x10a, 0x8001, "5755b5ad3f898a5204"}, {0x100c, 0x118, 0x1, "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"}, {0x84, 0xff, 0x5, "f6c2bf1ba51f405d2f1f12a6c0cc83ecad66d378bb97f17bce000fd4183436e00cb2c631d99b8992cec10982f859ec6aa2edccd075456bcccf0a7e7e5feaf31e4a495a15879daa5c0c652d11a66ac937ec3265a4effb9c2c5cdef846a78fae3d8a26426e63cdbfb4bbbc7b9c87ba53f217a15dcb5aa977d6"}, {0xa4, 0xff, 0x7ff, "a2fe95e51483560fae34a292a63de93fbbc92c7054f813787d74d1e549fe9227df2300d968c765b2f1a12e5e5928b8a8b6555461d4b1c2f7f8b9573aa98b69ccf1ea8b4d9cd7b1c21d643244a392d7819ed33578e395888681e5a589a6d9ef80b00837e296a5c16d23b3141f5c59e49cad1266d152bce649c8409d4d6b22f0dc3e46bf89d9315fbc98f2b73a897ceaf71a2038ef5cc70f1e"}], 0x114c}, 0x4000001) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x8, 0x5298, 0x12}}) [ 639.238744][T20571] vivid-003: reconnect [ 639.246453][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.264810][T20578] vivid-003: disconnect [ 639.298222][T20571] vivid-003: reconnect [ 639.298403][T20590] binder: 20588:20590 unknown command 0 16:16:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x18440, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000100)={0xdf, 0xb, 0x4, 0x2, 0x768, {0x77359400}, {0x7, 0x8, 0x20, 0x4, 0xee, 0x80, "993dee0f"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0x607100e8, 0x331, @mem_offset=0x9, 0x3}, 0x2d, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000001c0)=0x5, 0xffffffffffffffc0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 639.352052][T20590] binder: 20588:20590 ioctl c0306201 200000c0 returned -22 16:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000b41000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 639.396254][T20593] binder: 20588:20593 unknown command 0 [ 639.403812][T20593] binder: 20588:20593 ioctl c0306201 200000c0 returned -22 16:16:51 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket(0x8, 0x800, 0xfffffffb) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000540)) recvfrom$l2tp6(r5, &(0x7f0000000240)=""/240, 0xf0, 0x40000002, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @multicast1, r4}, 0xc) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) 16:16:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x7, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 639.503627][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.546578][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.557459][ T9670] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 639.621939][T20605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 639.636914][T20609] binder: 20607:20609 unknown command 0 [ 639.647745][ T9670] usb 3-1: Invalid ep0 maxpacket: 1 [ 639.653285][ T9670] usb usb3-port1: unable to enumerate USB device [ 639.674658][T20609] binder: 20607:20609 ioctl c0306201 200000c0 returned -22 [ 639.717599][T20610] binder: 20607:20610 unknown command 0 [ 639.725737][T20610] binder: 20607:20610 ioctl c0306201 200000c0 returned -22 [ 639.766525][T20544] IPVS: ftp: loaded support on port[0] = 21 16:16:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8927, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 640.328698][T20639] IPVS: ftp: loaded support on port[0] = 21 [ 640.502809][T20639] IPVS: ftp: loaded support on port[0] = 21 16:16:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000cc0)=0x5) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003d2d0337078c9614063d7b53ac2e8b212481498137807c98dde3aec7f51c3f936f55deab109c46c4db70d2b5ccd860e8965ce367dd6924f359d94d062fb1c2fb7fd414dbc3d57b7765c29e9e7fedd5b78952ed129b87d5f1b7eef0230b6d6512ced3cfd2a0eeb7ec6829c65a5c701f264c526ab69e5958a7e7f1688b0f3f73e5df404a074db9218f811e0641cce23c825668b4bb961631fc74de653fd4460b040f3e50231dd236f7e410481bcc4bc73170980b02a91e9ebb69aa6d3c557"], 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) syz_usb_control_io$hid(r3, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000d00)=0x1, 0x4) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x293af27151215b63, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1f, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x3, 0x1, 0x1, 0xfc, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x7f0}}, {{{0x9, 0x5, 0x81, 0x3, 0x18f, 0x9, 0x8c}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x3a, 0x72, 0x10, 0x2}, 0x63, &(0x7f00000002c0)={0x5, 0xf, 0x63, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x93, 0x2, 0x40, 0xf00f, 0x1, [0x3f3f, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "af58f23cfc8867c4af5bc561f079b245"}, @ss_container_id={0x14, 0x10, 0x4, 0xcc, "fde646d45d85b8f680c8c41c699d1a2f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x20, 0x6, 0x7f, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x93, "9cfc2cfd92f8877cdeb9f4bb32030d58"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xf7, &(0x7f0000000340)=@string={0xf7, 0x3, "7ecf7da79ea445cb11f7266ecaf3245763edc4ce4583cc56784681820e3a70b44b6bda5279f20cc06733935194aa3b8337cd57a3f059bd035d006182cfa7076d92e42cab24373cd70c9cdf7511ddcb36691eeb6c72271173b2d5d5f2a6c8fc1a356b6a66e7ef1b693c63a2190a6f6182eef3d5156bb3123350e74da43ff77fb4dce1915fe655676359da8a67da87a50ef84e5d27732e8a1d5d9f9a5a8aeb0b350e68cbdc7d7e8d865604feffc9bf72132481a322fb173b3dd92bd78f623ab244853734721dca59cd9b5677132c68d642eb312be85eac06ef8a7a9856e7204ac22599a8352294e051a0046d1ed8d79b0bea282e4ceb"}}, {0xf3, &(0x7f0000000440)=@string={0xf3, 0x3, "24337266a78a131a8abac05f4ac01882f72a55a7d3bd2277251c4d44c88a3cb0fcf7771801966bc1145058ec40a85cc4fb1b57472faf891a06d7ad3cce7bc33d14c8b42e1629b90ed1000f7ae38c912f884943146264c77a74950e91046ddb8767da3640b6e62b04f3f66ed21d97ead50e55011ab08f3f4d2274c1950d3965797e048a01c8f5ed13916bda381bb5aa21ad303e5ed256b52b38438d35fd360c5115d5e4dc532f2901c568082ee41ea593090a9f2ec44db68d50dc9c6f25c2584657f001302f76e6093580e4027ae68d535ce390509453035c808f83eca20dab994b692ebce00d1862b062341e15a1e97029"}}, {0x87, &(0x7f0000000540)=@string={0x87, 0x3, "2aea4803fb84845904e66bc97124ad355a0fdee4d7e998b99e25abdd2af22e6ca67db7a4e9fc11b58191088c3b404e99c539b261a3faca36ec4ac44940e719b4d7861abaa6b0becc5dd5a5fa4fabf9869469b60203abcec6033f1bcebd6f6119371181a2c1e2bccb0312a562f481e3e0334422123a545c156502f631ce5b9819d4efd2387a"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0xbc, &(0x7f0000000600)=@string={0xbc, 0x3, "fb19a09c66cd55756df9cb12afc585ffc244b681c5983b78b60ba47cd845cb653ae1d65c7bca0d0ad2ecc727b2af13bd4d156e38901aa196f37a85afd29b48fab920f438ccb7d96125fa5f615f63b31d69bb1ea134f635cbcddbf79cda0f04703595bc67e5eb4ffbe7360125f0d3cad85c75892391be3c724183cbb4db54582b3af5c7c681890bdb5e02e53588e337d1b6fe31dafc132771e575b40e17dc37b3a4dbefd56f43c9ad0bf8a534f411823acaf022100daae955b184"}}, {0xf4, &(0x7f00000006c0)=@string={0xf4, 0x3, "3e4e7fbc3c4e87015fd0caf47dd2eab6e3aec2b6a2b5777495eb27738e3465fa7433c2cc42020ba3d54dfa3cfb09c73e055858616f5703df98c662fa6d4acff104dae9402a25bbe3855ad888af64be21571501f14dd8354918b281c17f41c5ef3e0d9445c6fca824cda73e55e7903aa992e0ae77e5ed7f38e8913ac7fe6868963ec2410cdc0aaeb18c6c01cf86ca822b8748db95b5cdd9f13edba3ffea632758a131fb27f9da50abe0ed7a0c36faad65b99b6dd84a9ce2215c4dfd0be5024403f3da21de925275dce1064a8d6ae2a0a20fb98bd26336a64b6321b5f3e765b75a1ddbec7f16dc76f9b5c54259455eab303b10"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x459}}, {0x63, &(0x7f0000000840)=@string={0x63, 0x3, "53562f224bd3c6db75eace885cd4299782b7c1d3e005453c9365a1802011f28da78e8b4d3113bb97059d8162d1a1f1eb67b63e14c024665586783b5860043f0aba056a2239cce38aac3a556384c98af5a3e7dbe387405b00d3d75a5d45b5c1cc04"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x40, 0x3, 0x2d, {0x2d, 0x22, "b97428df4da14969731bddd702c1b13a4a959dea886c955901826a2e9579871733448ff8c41e5ff8987e26"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f00000009c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xb, "e77d"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1f, 0x1, {0x22, 0x91e}}}}, &(0x7f0000000c80)={0x18, &(0x7f0000000a80)={0x20, 0x16, 0xa9, "485a6facf30bd05b8bfa60062b9a5b30aec39e1a0f08705d8117524a19d5c3d9f98eb40c1141c690bcde3354631c65d0cc8c4f5f110c38ac477c52a7baad7b10269fe4146b958d56918f513f27b496c9f05e0440ccae3f082b711b49d952d60f2467a3a1b2be17896fa51c79b815757ce1c1d6f908c1cc1d0c8a7b89be922bf4611bc7af5377ea51843517c4ffa2d3494632f26edc42570a4f7da6c21140f377776eb96c6d3de774cb"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000bc0)={0x20, 0x1, 0x61, "221c49aa10a8797336387119b419e35b00e4f5b6654a055d536fc09f42fbb89e688074831d19f0942792365031cd3b01e0f926f7739e2734b02bae7994b5e370a04179871e2659f24e1257b7d34d927e2f10138d272b54c4911525641d5e8078d1"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222010000962303020f0158270c04370d00000000000000082a9000170900be0083"], 0x0}, 0x0) 16:16:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140002c21000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) write$fb(0xffffffffffffffff, &(0x7f00000000c0)="6f97fe73bf843debad8c95857e1e75528b96b97f93b5fce45c56a04b117ffacf5a7594dd65d60e3ec4aa7dea5dc320f066f8566231ab6e2b1fc95c6f04cfabe93738f8bfa4a652a4a33280832f4d3cbe32722f0a5760c6d6ccdee3dd5b4ae8db626891df754256c9289c5c300c31a415c482ff5fc6819328650057e5546c038f5ad1bade15a1671dd9b44c9dec7eb6ed241294cc04dc110ef5c5a3af70c077bdf3048164e1", 0xa5) close(r0) 16:16:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x3, r4}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x28) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYBLOB="190080000014", @ANYRES16=r7], 0x1) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000000)=0x3) 16:16:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x8, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:53 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8931, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 642.009805][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 642.040914][T20694] IPVS: ftp: loaded support on port[0] = 21 16:16:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x300, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfff, 0x100) bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$pidfd(0xffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x42c00, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000100)) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000280)=0x3) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) recvfrom$inet(r4, &(0x7f00000002c0)=""/145, 0x91, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000240)=0x8) 16:16:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000f01000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 642.080203][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:16:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r2}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r7, r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x815a, @private2={0xfc, 0x2, [], 0x1}, 0xba}, r7}}, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x793}, 0x8) close(r0) 16:16:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x500, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:54 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x80, 0x0, &(0x7f00000007c0)={0x8001, 0x659a, 0x10001, 0xbe3}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) [ 642.321246][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 642.333078][T15078] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 642.421571][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 642.597654][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 642.718128][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.752482][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.765184][T20694] IPVS: ftp: loaded support on port[0] = 21 [ 642.782740][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 642.898147][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 642.915908][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 642.967620][T15078] usb 3-1: SerialNumber: syz [ 642.990750][T15078] usb 3-1: config 0 descriptor?? [ 643.464103][T20695] udc-core: couldn't find an available UDC or it's busy [ 643.477623][T20695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.637540][T15078] usbhid 3-1:0.0: can't add hid device: -71 [ 643.643621][T15078] usbhid: probe of 3-1:0.0 failed with error -71 [ 643.678597][T15078] usb 3-1: USB disconnect, device number 110 [ 644.277517][T15078] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 644.517498][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 644.638035][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.649383][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.661109][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.747915][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 644.757013][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 644.769872][T15078] usb 3-1: SerialNumber: syz [ 644.775659][T15078] usb 3-1: config 0 descriptor?? 16:16:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x5, [0xff, 0x6, 0x7f, 0x2, 0x8]}, &(0x7f00000000c0)=0xe) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'vlan0\x00', 0x2}, 0x18) 16:16:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8933, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:16:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x600, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54c07420", @ANYRES16=r3, @ANYBLOB="00042d20000000dbdf250700000008000700e0000001080008000000000008000c000200000006000b000400000008000c000000000006000b000f00000008000700ac1414aa08000c0001000000"], 0x54}}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9d54088aefd964cc5a6a0586e492fea77888bc8402f35057627c828edc17fbbbd1f5679e23ee7da543788580a83202744a2a0ddc39451a204502dc98a54319a54c16b503b7386904fb214c5b7e24c24d5129cbee39a6670ce5014e632dc53524cc", @ANYRES16=r3, @ANYBLOB="10002abdf000080008006401010008000800ac1414aa08000700ac1414bb080004000100000008400400010000001f7996", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x8097) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) dup(r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e23, 0x6, @mcast1, 0x200}, {0xa, 0x4e22, 0xad0c, @empty, 0x200}, 0x800, [0xffff, 0x20, 0x1ff, 0x80000000, 0x1, 0x7fffffff, 0x4, 0x3]}, 0x5c) openat$vimc0(0xffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1ff, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000380)) [ 645.122657][T20801] IPVS: ftp: loaded support on port[0] = 21 16:16:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x700, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 645.167743][T15078] usbhid 3-1:0.0: can't add hid device: -71 [ 645.190937][T15078] usbhid: probe of 3-1:0.0 failed with error -71 16:16:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0445611, &(0x7f00000000c0)={0x5, 0x5, 0x4, 0x100, 0x5, {0x77359400}, {0x4, 0x0, 0x0, 0x4, 0xdc, 0x1, "c525cfdd"}, 0x8, 0x3, @userptr=0x61a5, 0xff}) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @private1}, 0xffffffffffffff76) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:16:57 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20) [ 645.260966][T15078] usb 3-1: USB disconnect, device number 111 [ 645.361750][T20817] vivid-003: disconnect [ 645.401597][T20813] vivid-003: reconnect [ 645.419088][T20817] vivid-003: disconnect [ 645.441159][T20813] vivid-003: reconnect 16:16:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x3f00, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:16:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x3f}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x40003) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000002e0c000000180001801400020073797a5f74756e00000000000000000018000380"], 0x44}, 0x2}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x18}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd7}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 645.613272][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.641192][T20847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.678158][T15078] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 645.822452][T20801] IPVS: ftp: loaded support on port[0] = 21 [ 645.925464][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 646.052529][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.087795][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.104857][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.198050][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 646.207111][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 646.215736][T15078] usb 3-1: SerialNumber: syz [ 646.221559][T15078] usb 3-1: config 0 descriptor?? [ 646.909276][T15078] hid-multitouch 0003:045E:87F5.001D: unknown main item tag 0x0 [ 646.917106][T15078] hid-multitouch 0003:045E:87F5.001D: unknown main item tag 0x0 [ 646.926383][T15078] hid-multitouch 0003:045E:87F5.001D: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 647.111303][ T8292] usb 3-1: USB disconnect, device number 112 [ 647.887556][T15078] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 648.127530][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 648.247758][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.258700][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.268688][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000f00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:00 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) mq_timedsend(r0, &(0x7f0000000000)="3cb0295bd73cb6329fe5e50878021467341034b3f1e18ca57355bbfd124c3c9cdc5084bede42d090416334d6e709bd9b451cead6e73dd446199c6557344e7165cd4c5e4aa21d7ae3aeb559f8618ed76f27ecbfd4656294240df3341aaec0f59fd587cca576f598c6a170e7c19a08c98396734c987f4c87e4e45f9d1c27779ebc226c63aad71d791ffa81075de2ba27450e50fc86d73de1ceb2514054bd144a3befa611b108f29d136fc9ccebfdb6067c15352c9ff69ef9111cd5b96dc6e65092734fe1b42340000a3c2308831697b82a54ee1571b9fb6c4ea180c1473ebd62c07b22a192", 0xe4, 0x1f, &(0x7f0000000100)={0x0, 0x3938700}) 16:17:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xff00, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @rand_addr, 0x80000000}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:00 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8934, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r4, 0x83d}, &(0x7f00000000c0)=0x8) [ 648.367534][T15078] usb 3-1: string descriptor 0 read error: -71 [ 648.374988][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 648.434647][T20912] IPVS: ftp: loaded support on port[0] = 21 [ 648.444689][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 16:17:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000021000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 648.493641][T15078] usb 3-1: config 0 descriptor?? 16:17:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3ff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)={0x3, 0x0, [{0xb, 0x7, 0xb7, 0x0, 0x1}, {0x80000000, 0x9e86, 0x9, 0x0, 0xc000000}, {0x1, 0x7, 0x3, 0x80, 0x6}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)={0x320, 0x78, 0x30, 0x40, 0x20, 0xbf6, 0x23, 0x0, {0x0, 0x6c4, 0x1}, {0xc8000000, 0x1ff, 0x1}, {0x0, 0x8, 0x1}, {0x8, 0x7, 0x4}, 0x2, 0x2, 0x5, 0x9, 0x1, 0x3ff, 0xa89, 0x9, 0x4, 0xd5, 0x100, 0x6, 0x2, 0x2, 0x1, 0x9}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x1000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 648.548306][T15078] usb 3-1: can't set config #0, error -71 [ 648.586061][T15078] usb 3-1: USB disconnect, device number 113 16:17:00 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg1\x00', r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4048010) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x30001, 0x0) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f00000001c0)=""/253) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x10005, 0x0) mq_timedsend(r5, &(0x7f0000000000)="1d3e0ad8c621a6b93b1d9a91462a5b9a06a20c3200589fa6338993fb643b6505e16bc00047c6103b55b9110ac57d1fd2632a457bebec09094be65e67570aef60520a1caf67b68fb2c41678951f81", 0x4e, 0x8, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000140)="49e6b7a7c76fd0f9d5cf89088e15a6bc4f888a4ad07faba02597ae62e6beb742e1372b1ddf00000000000000000000000000a512") ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000100)={0x3, 0x2}) [ 648.674303][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000031000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 648.729494][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 648.763421][T20952] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:17:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x2000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000080)={0x88e1, 0x7, 0x4, 0x20000840, 0xba8, {}, {0x4, 0x1, 0x20, 0xff, 0x2, 0x7, "8ba0f96c"}, 0x3, 0x1, @offset=0x2e, 0x0, 0x0, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4004080, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:00 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000805) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:17:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000041000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000a1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 648.977313][T20975] vivid-003: disconnect [ 648.987555][T15078] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 649.034264][T20971] vivid-003: reconnect [ 649.042817][T20975] vivid-003: disconnect [ 649.068844][T20971] vivid-003: reconnect [ 649.247875][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 649.350179][T20912] IPVS: ftp: loaded support on port[0] = 21 [ 649.388242][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.424488][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.468200][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8935, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 649.616647][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 649.647498][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 649.655633][T15078] usb 3-1: SerialNumber: syz [ 649.676835][T15078] usb 3-1: config 0 descriptor?? [ 649.684153][T21014] IPVS: ftp: loaded support on port[0] = 21 [ 649.945754][T21014] IPVS: ftp: loaded support on port[0] = 21 [ 650.400624][T15078] hid-generic 0003:045E:87F5.001E: unknown main item tag 0x0 [ 650.412601][T15078] hid-generic 0003:045E:87F5.001E: item fetching failed at offset 33/34 [ 650.427796][T15078] hid-generic: probe of 0003:045E:87F5.001E failed with error -22 [ 650.604534][ T8292] usb 3-1: USB disconnect, device number 114 [ 651.377553][ T2747] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 651.617541][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 651.757747][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.772864][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.784266][ T2747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x3000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:03 executing program 0: mq_open(&(0x7f0000000040)='&selinuxbdev-\x00', 0x40, 0x151, &(0x7f00000007c0)={0xa000, 0x6599, 0x10001}) restart_syscall() 16:17:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0x2, 0x2, 0x80000000, 0x1f, 0x9, "cca701e4730000000000009af5ffffffffffff"}) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x210180, 0x0) statx(r4, &(0x7f0000000100)='./file0\x00', 0x2000, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r6 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r6, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4008641a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[0x6, 0xd02, 0xdfdc, 0x1f]}) 16:17:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000c1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8937, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 651.877803][ T2747] usb 3-1: string descriptor 0 read error: -71 [ 651.884351][ T2747] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 651.923494][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 651.942509][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 651.967992][T21084] IPVS: ftp: loaded support on port[0] = 21 16:17:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000e1000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 651.999200][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 652.007664][ T2747] usb 3-1: config 0 descriptor?? 16:17:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x4000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 652.047702][ T2747] usb 3-1: can't set config #0, error -71 [ 652.066598][ T2747] usb 3-1: USB disconnect, device number 115 16:17:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20100, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4000, &(0x7f0000000080), 0x1, r2, 0x8}) 16:17:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000191000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x5000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 652.275234][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 652.318978][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000601000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x1d30, @rand_addr, 0x1}, 0x1c) listen(r1, 0x0) rt_sigaction(0x3a, &(0x7f0000001900)={&(0x7f0000001880)="c4c1fe5b61fec4e2192fbe02000000f2d8f80fae813223333382370f0f1c8fc2309a04640faefcc4c1356cc20f1c90ec000000c4c205ae73a3", 0x10000000, &(0x7f00000018c0)="c4e17d29a529f2aa88f20f78d5e100f30f1aa7070000006664642e660faef2c4e273f77f09c4e2699de7c4e3a55e3604c4e1a573f4aa3ef2a68fe828cc784c01", {[0x8000, 0x1]}}, &(0x7f00000019c0)={&(0x7f0000001940)="660fe454bb0764f30fa7e03e660f101ec4e1f710c5f26cc4c2092f250d000000c4e1065a8b6ff9f22ec4e279245900c1510e9bc4e1fdfab605000000", 0x0, &(0x7f0000001980)="0f3805f7da3e64f390c4e2ad2bcff20f38f18900f0ffffc4c3f9170d00000000e1c4c2f1bcd20f9bc3c4c1fd15ae1e000000652607"}, 0x8, &(0x7f0000001a00)) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000001a80)={0x9, 0x1, 0x20}) getsockname$packet(r2, 0x0, &(0x7f0000000540)) write$nbd(r2, &(0x7f0000001a40)={0x67446698, 0x0, 0x0, 0x3, 0x2, "3366751806f957414c266d1d0fea7adba6cb5e637be06eb6f614"}, 0x2a) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000001580)=""/180, 0xb4}, {&(0x7f0000001640)=""/184, 0xb8}, {&(0x7f0000001700)=""/240, 0xf0}], 0x9, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001b00)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000001bc0)={0x77359400}, 0x8) sendto$inet6(r3, &(0x7f0000000080)="fea6ecfbe55a0a6dce1b6ea77b86c1642c0d0d9bd7407b531ece48bd14266626e995b236a3cba5e5727390a474fa2862c73e415d1ffa3c87d5a5d882670b2e863c045b59c3608ac592075f7fdb2eac6bcbc36ebcaee4894d85f5b68327e00060e143275aeeabd001ef945f2528e688900a295cd4cca90326eabfd26a7575476ac60555c8a7967ed2566f", 0x8a, 0x0, 0x0, 0x0) 16:17:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x6000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 652.467751][ T2747] usb 3-1: new high-speed USB device number 116 using dummy_hcd 16:17:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000941000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 652.529482][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 652.586579][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x387402) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x9) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 652.717634][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 652.790424][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 652.804624][T21084] IPVS: ftp: loaded support on port[0] = 21 [ 652.837818][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.863902][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 652.864128][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.977051][ T2747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.098960][ T2747] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 653.119508][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 653.139267][ T2747] usb 3-1: SerialNumber: syz [ 653.153792][ T2747] usb 3-1: config 0 descriptor?? [ 653.417818][T21089] udc-core: couldn't find an available UDC or it's busy [ 653.429467][T21089] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.831091][ T2747] usbhid 3-1:0.0: can't add hid device: -71 [ 653.847381][ T2747] usbhid: probe of 3-1:0.0 failed with error -71 [ 653.889438][ T2747] usb 3-1: USB disconnect, device number 116 [ 654.477569][ T9670] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 654.747573][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 654.877755][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.895724][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.917575][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.028216][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 655.042079][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 655.060259][ T9670] usb 3-1: SerialNumber: syz [ 655.076355][ T9670] usb 3-1: config 0 descriptor?? [ 655.367994][ T9670] usbhid 3-1:0.0: can't add hid device: -71 [ 655.374098][ T9670] usbhid: probe of 3-1:0.0 failed with error -71 [ 655.407844][ T9670] usb 3-1: USB disconnect, device number 117 16:17:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8940, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000b41000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x7000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000003c0)) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket(0x10, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x4, 0x10001, 0x7, 0x6, 0x19, "a43f934b55de52dfd812aacff575814761a0d2", 0x94, 0x2bc}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x72, 0x8, 0x4, 0x8000, 0xa8, 0x101, 0x1f}, &(0x7f0000000140)=0x9c) close(r0) r5 = openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000300)={0x5, 0x3, 0x1, 'queue1\x00', 0x5}) 16:17:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:09 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8001, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xfffffffa, 0x4, 0xfffffff7, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 16:17:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x8000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 657.138775][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:09 executing program 0: r0 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x7}, 0x16, 0x1) 16:17:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$capi20(0xffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x20c040, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000000c0)={0x2, 0x2, 0x28, 0xffffffe1, 0x9, 0x1f}) close(r0) [ 657.184966][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 657.261756][T21215] IPVS: ftp: loaded support on port[0] = 21 16:17:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x3f000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 657.337122][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:09 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x80000000) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 657.379502][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 657.427660][ T3336] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 657.677619][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 657.784968][T21215] IPVS: ftp: loaded support on port[0] = 21 [ 657.798125][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.816864][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.867637][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.987880][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 657.997061][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 658.027574][ T3336] usb 3-1: SerialNumber: syz [ 658.033727][ T3336] usb 3-1: config 0 descriptor?? 16:17:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8941, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000200010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x33, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000540)) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xfdfdffff, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 658.162093][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 658.170429][T21292] IPVS: ftp: loaded support on port[0] = 21 [ 658.505404][T21292] IPVS: ftp: loaded support on port[0] = 21 [ 658.759831][ T3336] hid-multitouch 0003:045E:87F5.001F: unknown main item tag 0x0 [ 658.768045][ T3336] hid-multitouch 0003:045E:87F5.001F: unknown main item tag 0x0 [ 658.776811][ T3336] hid-multitouch 0003:045E:87F5.001F: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 658.963065][ T9670] usb 3-1: USB disconnect, device number 118 [ 659.747785][T15078] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 659.997611][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 660.128111][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.139124][T15078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.151340][T15078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000103d04f587000000001e0109022400010000000009040002090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030200000002077c17b472add1bb902fb9435c4e51fe540ab172be0611bc3f435ed767220149df567612"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 660.248499][T15078] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 660.257758][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 660.265930][T15078] usb 3-1: SerialNumber: syz 16:17:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:12 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0xbe5, 0xe009}, &(0x7f0000000100)=0xc) r4 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x4, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) read(r4, &(0x7f0000000000)=""/120, 0x78) 16:17:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xff000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:17:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8942, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 660.308777][T15078] usb 3-1: config 0 descriptor?? [ 660.329631][T15078] usb 3-1: can't set config #0, error -71 [ 660.385073][T15078] usb 3-1: USB disconnect, device number 119 [ 660.413952][T21373] IPVS: ftp: loaded support on port[0] = 21 16:17:12 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8003, 0x6599, 0x10001, 0xbe1}) 16:17:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000800010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xfffffdfd, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:12 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e20, @empty}}) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:17:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x100000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 660.787954][T15078] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 661.037895][T15078] usb 3-1: Using ep0 maxpacket: 16 [ 661.163317][T21373] IPVS: ftp: loaded support on port[0] = 21 [ 661.170172][T15078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.194859][T15078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.223506][T15078] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.245654][T15078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 661.354628][T15078] usb 3-1: New USB device found, idVendor=043d, idProduct=87f5, bcdDevice= 0.00 [ 661.380541][T15078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 661.426204][T15078] usb 3-1: SerialNumber: syz [ 661.455192][T15078] usb 3-1: config 0 descriptor?? [ 662.138019][T15078] usbhid 3-1:0.0: can't add hid device: -71 [ 662.150092][T15078] usbhid: probe of 3-1:0.0 failed with error -71 [ 662.176026][T15078] usb 3-1: USB disconnect, device number 120 [ 662.777794][ T2747] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 663.027613][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 663.151677][ T2747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.166281][ T2747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.189374][ T2747] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.210342][ T2747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.301641][ T2747] usb 3-1: New USB device found, idVendor=043d, idProduct=87f5, bcdDevice= 0.00 [ 663.321139][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 663.344346][ T2747] usb 3-1: SerialNumber: syz [ 663.379894][ T2747] usb 3-1: config 0 descriptor?? 16:17:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000f00010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:15 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x14a00, 0x0) mq_open(&(0x7f0000000000)='&selinM\xa2bde\n3l\xc9\xb2\xcf\xb9P\xc3`-\x00\x8d\xe2a\xf7\xabk\x8f\x8c\x88\n\xec\x99\xaa\x91K\xbdA\x9f\xd0\x16Oj}\x9cGN\xce\x82\xd6\x18B\n\xed\x7f.?\x19\x85.\xa2\x8ci\xf2\xc5c\xc0\x9cw\r$\x99\x06\x12\xda\x00', 0x40, 0x0, &(0x7f00000007c0)={0x7ffc, 0x6599, 0x10001, 0xbe1}) 16:17:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x200000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000200)=""/168, &(0x7f0000000000)=0xa8) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 663.621991][T21477] IPVS: ftp: loaded support on port[0] = 21 [ 663.657868][ T2747] usbhid 3-1:0.0: can't add hid device: -71 16:17:15 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x7}, 0x16, 0x7) [ 663.668886][ T2747] usbhid: probe of 3-1:0.0 failed with error -71 16:17:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x300000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000100)={0xa00000, 0x800, 0x1ff, r0, 0x0, &(0x7f00000000c0)={0x990902, 0x8, [], @p_u8=&(0x7f0000000080)=0x81}}) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) setsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000140)=0x7, 0x4) close(r0) 16:17:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001003000000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 663.733767][ T2747] usb 3-1: USB disconnect, device number 121 16:17:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x400000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:15 executing program 0: mq_open(&(0x7f00000000c0)='&sel)nuxbdev-\x00n\xa0D\xb2>\xa8\xa4\x84B\x19\x15\x9e\x12\xb3\x18\xcc\xe4\xc6\xa7\x88\xc2\"i\x83\xb6\xe3j\xee\xb0\x86/\n=\xe5i\xbe\x19\xad\xdcg+\xc35\'vv\x11\xb2\xfcS*\xe0O\xa3\xf1\x19?Y=\x1f\x0eC4\x05[\xdf\x06 \xaf\x05\xa1\x11\xc3\x7f:\xd8\x06\xfe\x1b\xdf:\xdcN<\"Y\x8f+<\xc1o\xf3\xb2\x1a\xab\x85\x9a\xdf\rdf\xb3\xbc\xeb!G\xe8\x1a\xb8\xac\xfblA\xc6{\x19L\x86c\xbf\x01\xa2\xfa\xcdV\xb3\x1b\x9e\xd9\x15@\xc8k\xbe< k\xcc\xe3\xd1k\xe3\x84\xfa/D\x9e\x8a\xec$\n\xf9^p\xfe*\xea\xac`^\xb8r\xb1u\r>\xd2\xe5rU\x1e\x99_/\xbd\xfb%\xe0&\b\xa4\x96\xf9H\xc8\x84', 0x40, 0xa, &(0x7f00000007c0)={0x8000, 0x6599, 0xc, 0xbe1}) [ 663.910623][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 663.967332][T21515] vivid-003: disconnect 16:17:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001004000000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 663.991576][T21510] vivid-003: reconnect [ 663.999894][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 664.015477][T21522] vivid-003: disconnect [ 664.031064][T21510] vivid-003: reconnect 16:17:16 executing program 1: rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0xa, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) listen(r4, 0x1601000) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f0000000100)=""/117, 0x75, 0x2040, &(0x7f00000001c0)={0xa, 0x4e21, 0x80000001, @empty, 0x93a}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:16 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) accept4$tipc(r2, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10, 0x80800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) sendmsg$AUDIT_GET(r1, 0xfffffffffffffffe, 0x8001) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x282c00, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0x1}}, 0x18) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000240)={0x9, "a2fd7c05e53c7d896b005105da079b14f76a34f55f938fd5d24b4d39dae39827", 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r5, &(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64=0x0], 0x1) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000000c0)=""/102) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) [ 664.138824][ T2747] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 664.220751][T21535] vivid-001: disconnect [ 664.251668][T21532] vivid-001: reconnect [ 664.268773][T21536] vivid-001: disconnect [ 664.301140][T21532] vivid-001: reconnect [ 664.377794][ T2747] usb 3-1: Using ep0 maxpacket: 16 [ 664.509604][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.542332][ T2747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.543428][T21477] IPVS: ftp: loaded support on port[0] = 21 [ 664.576535][ T2747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 664.677922][ T2747] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 664.691690][ T2747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 664.710451][ T2747] usb 3-1: SerialNumber: syz [ 664.723618][ T2747] usb 3-1: config 0 descriptor?? 16:17:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8946, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:16 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x659b, 0x10001, 0xbe1}) [ 664.893065][T21572] IPVS: ftp: loaded support on port[0] = 21 [ 665.169862][T21572] IPVS: ftp: loaded support on port[0] = 21 [ 665.450379][ T2747] hid-multitouch 0003:045E:87F5.0020: unknown main item tag 0x0 [ 665.458507][ T2747] hid-multitouch 0003:045E:87F5.0020: unknown main item tag 0x0 [ 665.467277][ T2747] hid-multitouch 0003:045E:87F5.0020: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 665.655472][ T2747] usb 3-1: USB disconnect, device number 122 [ 666.457783][ T9670] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 666.720185][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 666.858395][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.869472][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.880554][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001002010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x500000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x519) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:19 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7bf, 0x42000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000000c0)=0x50) dup3(r1, 0xffffffffffffffff, 0x0) 16:17:19 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8947, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 667.017756][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 667.026849][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 16:17:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = pidfd_getfd(r1, r3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x0, 0x80, 0x800, r8}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x8e59f1bab611907f, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 667.073984][T21640] IPVS: ftp: loaded support on port[0] = 21 [ 667.084674][ T9670] usb 3-1: config 0 descriptor?? 16:17:19 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x800, 0x80, &(0x7f00000007c0)={0x7fff, 0x6599, 0x10001, 0xbe1}) 16:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x600000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 667.147811][ T9670] usb 3-1: can't set config #0, error -71 [ 667.149869][ T9670] usb 3-1: USB disconnect, device number 123 16:17:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') sendfile(r3, r4, 0x0, 0x404c2) close(r0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)={0x0, 0xfffffdf5}, 0x1, 0x0, 0x0, 0xc855}, 0x4000) getsockname$packet(r5, 0x0, &(0x7f0000000540)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) 16:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001003010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 667.316324][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x700000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:19 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0xfffb}, 0x8) [ 667.377006][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x402a00) ioctl(r2, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f00000000c0)=[0x20, 0x1, 0x3, 0x7], &(0x7f0000000100)=[0x401, 0x7, 0xe4b3], &(0x7f0000000140)=[0x9, 0x7, 0x7, 0xfffd, 0x6, 0x5]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000200)={'team0\x00', {0x2, 0x4e21, @multicast2}}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001004010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x800000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 667.587870][ T9670] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 667.606301][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:19 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0x11c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10000}, [@IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}]}]}, 0x11c}}, 0x8c0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x3c}}, 0x2) sync() mq_open(&(0x7f0000000780)='&s\x01\x00\x12\x00\x00\t*P/.\xd9\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x9, 0x10001, 0xbe1}) exit_group(0x0) [ 667.663931][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 667.837771][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 667.867325][T21640] IPVS: ftp: loaded support on port[0] = 21 [ 667.978396][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.000958][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.023954][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8949, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 668.128380][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 668.142330][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 668.154755][T21737] IPVS: ftp: loaded support on port[0] = 21 [ 668.161564][ T9670] usb 3-1: SerialNumber: syz [ 668.177358][ T9670] usb 3-1: config 0 descriptor?? [ 668.879565][ T9670] hid-multitouch 0003:045E:87F5.0021: unknown main item tag 0x0 [ 668.887367][ T9670] hid-multitouch 0003:045E:87F5.0021: unknown main item tag 0x0 [ 668.898168][ T9670] hid-multitouch 0003:045E:87F5.0021: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 668.939918][T21737] IPVS: ftp: loaded support on port[0] = 21 [ 669.085253][ T9670] usb 3-1: USB disconnect, device number 124 [ 669.857790][T21745] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 670.107857][T21745] usb 3-1: Using ep0 maxpacket: 16 [ 670.227891][T21745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.239485][T21745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.249901][T21745] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.338392][T21745] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 670.352107][T21745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 670.364424][T21745] usb 3-1: SerialNumber: syz [ 670.383872][T21745] usb 3-1: config 0 descriptor?? 16:17:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x2, 0x2, 0x4, 0x3, 0x40, 0x7}}, 0x50) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000080)) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100a010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x3f00000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:22 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x7fff, 0x80000001, 0x5, 0xb0e8}) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:17:22 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x894a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 670.457873][T21745] usb 3-1: can't set config #0, error -71 [ 670.503874][T21745] usb 3-1: USB disconnect, device number 125 [ 670.548268][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 670.562187][T21827] IPVS: ftp: loaded support on port[0] = 21 16:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100c010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xfdfdffff00000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 670.635083][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:22 executing program 0: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd0000, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x52181, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf253100000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xc050) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:17:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0xd14) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:22 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0x6, 0x1, 0x4, 0x2, [], [], [], 0x8, 0x401, 0x9, 0x5, "0ef11bc2f2e59c39723b4fa6a8e5c349"}) r3 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) close(r1) splice(r0, 0x0, r1, 0x0, 0x10006, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$9p(r0, &(0x7f0000000000)="14dae809422b48181aacbf9245eecbf5faea0073518c7b99692b", 0x1a) 16:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0xff00000000000000, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 671.017835][T21745] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 671.267703][T21745] usb 3-1: Using ep0 maxpacket: 16 [ 671.361833][T21827] IPVS: ftp: loaded support on port[0] = 21 [ 671.389260][T21745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.422404][T21745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.469985][T21745] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.628592][T21745] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 671.647941][T21745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 671.685392][T21745] usb 3-1: SerialNumber: syz [ 671.708873][T21745] usb 3-1: config 0 descriptor?? [ 672.463715][T21745] hid-multitouch 0003:045E:87F5.0022: unknown main item tag 0x0 [ 672.477968][T21745] hid-multitouch 0003:045E:87F5.0022: unknown main item tag 0x0 [ 672.502936][T21745] hid-multitouch 0003:045E:87F5.0022: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 672.669048][T21811] usb 3-1: USB disconnect, device number 126 [ 673.487818][T21811] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 673.737880][T21811] usb 3-1: Using ep0 maxpacket: 16 16:17:25 executing program 2: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xfffffe9f, @lang_id={0x0, 0x3, 0x1407}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r6, 0x20f5, 0x1ff, 0xfff, 0x1f, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x34d, 0x102, 0x5, 0x9, r7}, &(0x7f0000000140)=0x10) 16:17:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100e010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x6307}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:25 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x894b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:25 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x7ffd, 0x7fffffff, 0x10001, 0x8f}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000100)={0x9, 0x1, 0x29d, 0x48b0518c718129ac}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0xbc, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d623a77}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x184103f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x175da368}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28194fd8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4189}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdf17f04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4284a25a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x246b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e14bb75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14358f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x115bc2b5}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x88000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xff842d8c41fc5557}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa0aae36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72fe0502}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cbff996}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79cb2804}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6da713bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a0a195e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3019a214}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63e30a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13062c5f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66b332b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5af41e6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbf98d92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f39cc8c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14512259}]}, {0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48880}, 0x4008804) [ 673.859128][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.870433][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.880973][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.953096][T21811] usb 3-1: string descriptor 0 read error: -71 [ 673.962563][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 673.976663][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 674.004186][T21939] binder: 21935:21939 unknown command 25351 [ 674.007162][T21940] IPVS: ftp: loaded support on port[0] = 21 [ 674.016736][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 674.029623][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 674.066054][T21939] binder: 21935:21939 ioctl c0306201 200000c0 returned -22 [ 674.066502][T21811] usb 3-1: config 0 descriptor?? [ 674.121862][T21947] binder: 21935:21947 unknown command 25351 [ 674.139585][T21947] binder: 21935:21947 ioctl c0306201 200000c0 returned -22 16:17:26 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000d05000129b57000fedbdb250100000a08001f006401010178009280ef891750eaeec36d6f6d984ecab8e9454d4e64315c43bce288f76016325ff4b588c02c4ba0b7b2c2062dd9ed5a842c55fa5cce71a75276b2124c02d62a362c97e23e78709040d32471fa0656216ea778da7c5bdcf6a49d000000001fa6d7c3ed00"/142], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:17:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001019010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = socket$inet(0x2, 0x80001, 0x84) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 674.168496][T21811] usb 3-1: can't set config #0, error -71 [ 674.202188][T21811] usb 3-1: USB disconnect, device number 127 16:17:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x630b}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 674.320568][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:26 executing program 0: pkey_alloc(0x0, 0x0) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 674.397177][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001060010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 674.595224][T21811] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 674.701258][T21940] IPVS: ftp: loaded support on port[0] = 21 [ 674.867971][T21811] usb 3-1: device descriptor read/64, error 18 [ 675.265698][T21811] usb 3-1: device descriptor read/64, error 18 [ 675.547808][T21811] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 675.547912][ T144] tipc: TX() has been purged, node left! [ 675.757874][ T144] tipc: TX() has been purged, node left! [ 675.827817][T21811] usb 3-1: device descriptor read/64, error 18 [ 675.917823][ T144] tipc: TX() has been purged, node left! [ 676.087950][ T144] tipc: TX() has been purged, node left! [ 676.237788][T21811] usb 3-1: device descriptor read/64, error 18 [ 676.247965][ T144] tipc: TX() has been purged, node left! [ 676.359441][T21811] usb usb3-port1: attempt power cycle [ 676.417871][ T144] tipc: TX() has been purged, node left! [ 676.587797][ T144] tipc: TX() has been purged, node left! [ 676.777802][ T144] tipc: TX() has been purged, node left! [ 676.987792][ T144] tipc: TX() has been purged, node left! 16:17:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "5c130f0821bca67a54cb5c7dd15eb8a39420dc45d6b29f12fbb9d0570f231b6ad1bb3d55e3df3bda594e10068bc61459e230230b04804ba59e6a45bbb05b8a79b2c72aac8d3dc791b8f68b51dd62358901e3eec95c01c43c6fba61fea0b5215a0e3bc77c497f44fc14fea26277da81b2dd4f5701eda5d6e87e25955208afeb9345ac191da75dc059e162036a27764db7ffd08597448a05c730f296de2db8f0"}}, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7b, &(0x7f0000000000)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, 0x84) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r1, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000200)={0x0, 0xffffff30, 0x4, 0x9, 0x9, 0x7, 0x34e9, 0x5, 0x2, 0x80, 0xfffff801, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x630d}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) r2 = openat$vcs(0xffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x800, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="8e358335037d5dd4975b258280203b16", 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:29 executing program 0: mq_open(&(0x7f0000000000)='&selin{ybd47Y\xdfJ\xb4\xd2F\x9b?P#\xa4\xbe\x8c\xd3&aO\xc4=gB\xda|\xf0', 0x80, 0xc0, &(0x7f00000007c0)={0x8001, 0x4d5, 0x81, 0x20}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc6c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:17:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001094010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x894c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 677.067825][T21811] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 677.147865][ T144] tipc: TX() has been purged, node left! [ 677.154136][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 677.181996][T22041] IPVS: ftp: loaded support on port[0] = 21 16:17:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x6310}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 677.211160][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x2, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e24, @local}], 0x10) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, 0x0) pwritev(r4, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus/file0\x00', 0x141042, 0x0) select(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x7ff, 0x1, 0xdb, 0x0, 0x4, 0x1000000000}, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x4, 0x0, 0x7ff, 0x12}, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) ftruncate(r5, 0x200004) 16:17:29 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000240)={0x2, 0x1, 0x4, 0x5, 0x1, "823e8e6619893a66d285ed7bb6b4e08010f7bb", 0x9, 0x7fffffff}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x80) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40081, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r6, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x1, 0xbbac, 0xc, 0x1, 0xed4b, 0x1, 0x1, 0xb0, r7}, 0x20) 16:17:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010b4010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 677.310152][ T144] tipc: TX() has been purged, node left! [ 677.316514][ T144] tipc: TX() has been purged, node left! [ 677.365585][ T144] tipc: TX() has been purged, node left! [ 677.392689][ T144] tipc: TX() has been purged, node left! [ 677.412330][T22066] binder: 22057:22066 unknown command 25360 [ 677.446991][T22066] binder: 22057:22066 ioctl c0306201 200000c0 returned -22 [ 677.469679][ T144] tipc: TX() has been purged, node left! [ 677.475836][ T144] tipc: TX() has been purged, node left! 16:17:29 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f241, 0x100}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x100, 0x3, 0x1}) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 677.502406][T22066] binder: 22057:22066 unknown command 25360 [ 677.533904][T22066] binder: 22057:22066 ioctl c0306201 200000c0 returned -22 [ 677.587899][T21811] usb 3-1: device not accepting address 4, error -71 16:17:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 677.654045][T22089] vivid-001: disconnect [ 677.697130][T22088] vivid-001: reconnect [ 677.707039][T22089] vivid-001: disconnect [ 677.717866][ T144] tipc: TX() has been purged, node left! [ 677.723850][T22088] vivid-001: reconnect [ 677.917923][ T144] tipc: TX() has been purged, node left! [ 677.951534][T22041] IPVS: ftp: loaded support on port[0] = 21 [ 677.957930][T21811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 678.003040][ T144] tipc: TX() has been purged, node left! [ 678.021215][ T144] tipc: TX() has been purged, node left! [ 678.058473][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 678.081168][ T144] tipc: TX() has been purged, node left! [ 678.089880][ T144] tipc: TX() has been purged, node left! [ 678.112896][ T144] tipc: TX() has been purged, node left! [ 678.119769][ T144] tipc: TX() has been purged, node left! [ 678.177924][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.189933][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.200293][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.248016][ T144] tipc: TX() has been purged, node left! [ 678.288405][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 678.297482][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 678.310365][T21811] usb 3-1: SerialNumber: syz [ 678.319970][T21811] usb 3-1: config 0 descriptor?? [ 678.387897][ T144] tipc: TX() has been purged, node left! [ 678.557827][ T144] tipc: TX() has been purged, node left! [ 678.717852][ T144] tipc: TX() has been purged, node left! [ 678.887889][ T144] tipc: TX() has been purged, node left! [ 678.990141][T21811] hid-multitouch 0003:045E:87F5.0023: unknown main item tag 0x0 [ 678.998032][T21811] hid-multitouch 0003:045E:87F5.0023: unknown main item tag 0x0 [ 679.006654][T21811] hid-multitouch 0003:045E:87F5.0023: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 679.087854][ T144] tipc: TX() has been purged, node left! [ 679.190552][ T9720] usb 3-1: USB disconnect, device number 5 [ 679.237844][ T144] tipc: TX() has been purged, node left! [ 679.447831][ T144] tipc: TX() has been purged, node left! [ 679.967833][ T9720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 680.207897][ T9720] usb 3-1: Using ep0 maxpacket: 16 [ 680.328479][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.339806][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.350938][ T9720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "55824182081e3596f650cbbddc8e10283b505c0a274ece442a3db5500cef815eb4e945c0785e7fcd3134db8d06cc63cd200327ff62d06c5082a600"/72}}, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) sync_file_range(r1, 0xffffffff, 0x8000, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x6312}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000080)) 16:17:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:32 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) getuid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r3, @ANYBLOB="0804000000000000"], 0x30}}, 0x0) r4 = socket$inet(0x2, 0x800, 0x5) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001f80)={'vxcan1\x00', r7}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002600)={&(0x7f0000001fc0)={0x608, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2a}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xf3b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7ff, 0x0, 0x7, 0x81}]}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x4008841}, 0x40) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 16:17:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8953, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 680.437870][ T9720] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 680.446971][ T9720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 680.498028][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.503942][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 680.519605][ T9720] usb 3-1: config 0 descriptor?? [ 680.525575][T22150] binder: 22142:22150 unknown command 25362 [ 680.547110][T22150] binder: 22142:22150 ioctl c0306201 200000c0 returned -22 [ 680.549525][T22148] IPVS: ftp: loaded support on port[0] = 21 [ 680.577982][ T9720] usb 3-1: can't set config #0, error -71 16:17:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 680.599401][ T9720] usb 3-1: USB disconnect, device number 6 [ 680.614497][T22159] binder: 22142:22159 unknown command 25362 [ 680.627346][T22159] binder: 22142:22159 ioctl c0306201 200000c0 returned -22 16:17:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x4}, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 680.692745][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 16:17:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x6314}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 680.745961][T22155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:17:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010003f0000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 680.861688][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 680.899506][T22192] binder: 22190:22192 unknown command 25364 [ 680.940555][T22192] binder: 22190:22192 ioctl c0306201 200000c0 returned -22 [ 680.975069][T22201] binder: 22190:22201 unknown command 25364 [ 680.988593][T22201] binder: 22190:22201 ioctl c0306201 200000c0 returned -22 [ 681.007985][ T9720] usb 3-1: new high-speed USB device number 7 using dummy_hcd 16:17:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x490000, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000300)) 16:17:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000400000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 681.158015][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 681.189164][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 681.257894][ T9720] usb 3-1: Using ep0 maxpacket: 16 [ 681.378512][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.405590][ T9720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.439695][ T9720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.474736][T22148] IPVS: ftp: loaded support on port[0] = 21 [ 681.558592][ T9720] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 681.577000][ T9720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 681.610807][ T9720] usb 3-1: SerialNumber: syz [ 681.631347][ T9720] usb 3-1: config 0 descriptor?? [ 682.349655][ T9720] hid-multitouch 0003:045E:87F5.0024: unknown main item tag 0x0 [ 682.357434][ T9720] hid-multitouch 0003:045E:87F5.0024: unknown main item tag 0x0 [ 682.367114][ T9720] hid-multitouch 0003:045E:87F5.0024: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 682.552852][ T9720] usb 3-1: USB disconnect, device number 7 [ 683.327890][T21811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 683.577818][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 683.698009][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.709074][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.720825][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000f587000000001e0109022400010000000009040000090300000009210000000122220009058103000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x2}) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x2, 0x385680) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000240)=[{{}, 0x3, 0x6, 0x80000}, {{0x0, 0x2710}, 0x0, 0xffff}, {{0x77359400}, 0x1f, 0x800, 0x1}, {{0x77359400}, 0x12, 0x3f, 0x3}, {{r4, r5/1000+10000}, 0x5, 0x3, 0x80}, {{}, 0x14, 0x1000, 0x80}, {{}, 0x15, 0x1, 0x7}], 0x70) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="402222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8955, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40046302}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:35 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0xb, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x210, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40041}, 0x40001) getsockname$packet(r0, 0x0, &(0x7f0000000540)) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x4000000) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/11) [ 683.808037][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 683.817100][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 683.825429][T21811] usb 3-1: SerialNumber: syz [ 683.831844][T21811] usb 3-1: config 0 descriptor?? [ 683.892538][T21811] usb 3-1: can't set config #0, error -71 [ 683.924815][T21811] usb 3-1: USB disconnect, device number 8 16:17:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 683.981092][T22275] binder: BC_ACQUIRE_RESULT not supported [ 683.984230][T22271] IPVS: ftp: loaded support on port[0] = 21 [ 684.003508][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 684.021067][T22275] binder: 22265:22275 ioctl c0306201 200000c0 returned -22 16:17:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0xfffffffd, 0x8}, 0x8) close(r0) r3 = openat$zero(0xffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e21, @remote}], 0x20) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000001c0)="5edb36c2e6d10f8b02b146826a2bc6732d2766360f42dfdf648dfb38eed005d9a7ce1ba2673e83bc16cbd5de3ec703339fdd6727eb826fe85a7079ee11d5a389827c6097d3f34024f86126cdec587763ccb00c4e3ee72041a0bc55d1059c9402792af3d24305e599ea601e2a4aa1a6dea799e3c3e1a71d2c79373ef9994475cd0cc7459e93a6e3043145df684c58bfaedfeaebafb2bf129543043701defcc14b134fc861b7d3dd9801407c73f6266a1b129ed61940e772470ae9aa5b86f006345f69797e34e938c77fc5af041c1de465fabdbc59fadb51f36bc3d2839ab7d802952758ad66acce1a2ce1606086aa893a844e36df29e6f2d94260a0d04ff52e8c") [ 684.080856][T22282] binder: BC_ACQUIRE_RESULT not supported [ 684.086634][T22282] binder: 22265:22282 ioctl c0306201 200000c0 returned -22 16:17:36 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x1, 0x0, &(0x7f0000000100)={0x2b, 0x6599, 0x10001, 0x8000}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='truselfselinux\'cpusetbdev\x00'], &(0x7f0000000180)='wlan0md5sum$+\x00', 0xe, 0x3) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x8, 0x100, 0x4, {0x8, 0xda4f338, 0x3, 0x6}}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000001c0)) prctl$PR_CAPBSET_DROP(0x18, 0x23) 16:17:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40046304}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 684.169021][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 684.214198][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r3}) open(&(0x7f0000000100)='./file0\x00', 0x105000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 684.304780][T22315] vivid-001: disconnect [ 684.339380][T22313] vivid-001: reconnect [ 684.395652][T22315] vivid-001: disconnect [ 684.409328][T22313] vivid-001: reconnect [ 684.438065][T21811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 684.534404][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 684.637042][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 684.749567][T22271] IPVS: ftp: loaded support on port[0] = 21 [ 684.758140][T21811] usb 3-1: device descriptor read/64, error 18 [ 685.147873][T21811] usb 3-1: device descriptor read/64, error 18 [ 685.437882][T21811] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 685.737851][T21811] usb 3-1: device descriptor read/64, error 18 [ 686.137958][T21811] usb 3-1: device descriptor read/64, error 18 [ 686.270324][T21811] usb usb3-port1: attempt power cycle 16:17:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "10c3b10f7c2c29c38ff3b7259a13de0888e5d4af8364ba2be7d7921e8eae9cff5324be9cde0cb15e15a9521cba9b5e392ca4576638cbbca01813f9ce538a868ed6964ef4c425d6534e8916f80c963333f5e3e5d3fbeb4edaedd3a30212c9ed36d800a376b0185e593e3c9ba958e1be293e571ced798be8d4c46b65"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40046307}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xb8483) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) signalfd4(r1, &(0x7f0000000040)={[0x80000001, 0xffffbcdd]}, 0x8, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x1, 0x0, &(0x7f00000007c0)={0x7fff, 0x6599, 0x10001, 0xbe1}) 16:17:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'erspan0\x00', {0x2}, 0x1}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf99}, 0xffffffffffffffa3) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000080)=""/58) close(r0) 16:17:39 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x895d, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 686.977883][T21811] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 687.083557][T22361] IPVS: ftp: loaded support on port[0] = 21 [ 687.084491][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 687.089984][T21811] usb 3-1: device descriptor read/8, error -71 16:17:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:39 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe3}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x7) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000100)) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x73, "c8eddcee1cca3cc2875cae91f4ce4c6b1553305c1e6fca6993fdfded1ed0ef84db7d35735e8c62d7bd9345757bc60af5c718ebb514ca922260e6727917dfa4aa6143ea6ad92083b79cb7b15a577a08e212d0c4b506303799bac19a37f77da3aa4519f1e73d7a62fff5bcb5151b24243a62c8f5"}, &(0x7f00000000c0)=0x97) 16:17:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40086303}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000400)=""/25, 0x19}], 0x5, &(0x7f0000000480)=""/246, 0xf6}, 0x0) close(r0) [ 687.371984][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 687.388883][T21811] usb 3-1: device descriptor read/8, error -71 16:17:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 687.438858][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 687.739549][T22361] IPVS: ftp: loaded support on port[0] = 21 [ 687.887909][T21811] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 687.978438][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 688.108446][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.119584][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.130824][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.218366][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 688.227392][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 688.236788][T21811] usb 3-1: SerialNumber: syz [ 688.243747][T21811] usb 3-1: config 0 descriptor?? [ 688.940296][T21811] hid-multitouch 0003:045E:87F5.0025: unknown main item tag 0x0 [ 688.948139][T21811] hid-multitouch 0003:045E:87F5.0025: unknown main item tag 0x0 [ 688.969041][T21811] hid-multitouch 0003:045E:87F5.0025: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 689.142396][T15079] usb 3-1: USB disconnect, device number 12 [ 689.928028][T15072] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 690.187915][T15072] usb 3-1: Using ep0 maxpacket: 16 [ 690.328118][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.339209][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.350355][T15072] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:17:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x2, 0x2, 0x1, 0x2}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000200)) syz_usb_control_io$hid(r3, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000140)) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 690.448344][T15072] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 690.457449][T15072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 690.466893][T15072] usb 3-1: SerialNumber: syz [ 690.473897][T15072] usb 3-1: config 0 descriptor?? 16:17:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8970, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:42 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @private0, 0x8}, {0xa, 0x4e23, 0x81, @loopback, 0x7}, 0x9, [0x2, 0x5, 0x401, 0xc05a, 0x9, 0x5, 0x1000, 0x6]}, 0x5c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={{0x7, 0x0, @descriptor="814b9a500343ee97"}}) 16:17:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x4008630a}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x64) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) 16:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 690.502231][T15072] usb 3-1: can't set config #0, error -71 [ 690.525761][T15072] usb 3-1: USB disconnect, device number 13 16:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 690.598287][T22473] binder: BC_ATTEMPT_ACQUIRE not supported [ 690.608164][T22471] IPVS: ftp: loaded support on port[0] = 21 [ 690.627709][T22473] binder: 22462:22473 ioctl c0306201 200000c0 returned -22 16:17:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x120, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5a}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x48000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xe24b}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x48840) close(r0) 16:17:42 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000000)={r3}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) ptrace$setregs(0x2, r4, 0x8, &(0x7f0000000200)="0ad2be739146b3bb715170f297f8aa31afe435abf94b617e3bf6409fd4493bce042fa34c9d5819fefeb09ca5922cc799b6921c5ac8c6cbc3783872b6bf07c8f6be0aec7142946f27b8da5bf5c32475bfcd93005c6d4a41486d76b1d8f8ac1370c85ebf7bbce43c27a0a2fa8239ed89f4505ba830114dcdd171ba366a084187fb2fb746b03c03") setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x4}}, 0x5, 0x100}, 0x88) [ 690.683752][T22481] binder: BC_ATTEMPT_ACQUIRE not supported [ 690.702151][T22481] binder: 22462:22481 ioctl c0306201 200000c0 returned -22 16:17:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40086310}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:42 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) clone(0x82002000, &(0x7f0000000800)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="d5868b23d21d433c2c08210466bbe5b9593c8d1722b8375a9dfce02b94b71d2659254dd2c8e7a0128ea16562ec33a7570a9e2a89f36f249eb0ab3156b529cbebce93eb64eb751054ccf3283c0fbdda9f6c6a13251507fe7b9fb8b53f438b0f4947c764a0bd3de8c4ee12c6ccc53276cc5f7c6ac44c075335be5fc1b840163fc9c6de530dc5dd5169e4e0ceb87533fccfe6007512984c0b4868bd73fd129d033b6b16da9ae8295fb00d7422f539b5eb5024b128497e8f8a31cd2599df") [ 690.841189][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 690.879411][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 691.068392][T15072] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 691.304525][T22471] IPVS: ftp: loaded support on port[0] = 21 [ 691.310778][T15072] usb 3-1: Using ep0 maxpacket: 16 [ 691.438166][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.468838][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.488530][T15072] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 691.588073][T15072] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 691.597160][T15072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 691.627905][T15072] usb 3-1: SerialNumber: syz [ 691.636413][T15072] usb 3-1: config 0 descriptor?? [ 692.349730][T15072] hid-multitouch 0003:045E:87F5.0026: unknown main item tag 0x0 [ 692.357506][T15072] hid-multitouch 0003:045E:87F5.0026: unknown main item tag 0x0 [ 692.377389][T15072] hid-multitouch 0003:045E:87F5.0026: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 692.552210][T15072] usb 3-1: USB disconnect, device number 14 [ 693.337968][ T3338] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 693.578001][ T3338] usb 3-1: Using ep0 maxpacket: 16 16:17:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e2010000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffe}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x1, "23e1e6d4333e3a027789e5cb2048857e088e944238bf056edd0dbbf7cc11f257", 0x800, 0x6, 0x0, 0x4, 0x4}) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1}, 0x2) r3 = openat$vcsa(0xffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x501040, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000001020101000000000000000001000002060007400004000008000440e0000000080005400000000613000b00e925140e10e5226703ac866463616c6c666f7277617264696e670000050006000000000010000003800600034000010000"], 0x64}, 0x1, 0x0, 0x0, 0x2880}, 0x10) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x410a02, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x0, 0x9}], 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x400c630e}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:45 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x145f7c6b, "fb43481af5af13181b1db981d29900b535515c2d1832a94d98d7df9e300c2601", 0x1, 0x1}) 16:17:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8971, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 693.753942][T22579] vivid-003: disconnect [ 693.758620][ T3338] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 693.766794][ T3338] usb 3-1: can't read configurations, error -71 16:17:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x400c630f}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 693.807452][T22574] vivid-003: reconnect [ 693.816195][T22583] IPVS: ftp: loaded support on port[0] = 21 16:17:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:45 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000100)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="dc6f9594bd630071a85d03cef8b190548f7f57dac555294ceebe6ba43ec136a4f5c8c51aca28d70ecdfa787ad44ca5be986399096e652fe2e415c411fca69bf03dbdaed441c0319c9cf0efb87cf13aff617423332480f347aa614bd598b5bea40a30323fb7c4cfccd061e1c11232cbac496ef70d", 0x74}, {&(0x7f0000000340)="21478adc2936075d3f28be61266fd9c1e95c0b2cd09832707ad558da48bd91aef5f473f91dbb207e14bd31b54e96a727a26b41b0c2ade388d9f3c0b8f27bb4abcf15f0f9b285410b3616f43c8f228f4759c65767d71eaca1c9730e68bda29ef38c97668faaddf18770d4f8b12b144afdb3cfdebbd8299881d417e99af78e640d4b6731dd45a78db6362109e22576f36d14a534479141d86637151b5aef7edf0949284ab27977bf6fbba6fc347bfac304bca3abd2b766995162446b4e6736846063dbd9c1d2a7b3", 0xc7}, {&(0x7f0000000800)="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", 0x1000}], 0x3, &(0x7f0000000580)=[{0x5c, 0x30a, 0x8000, "7c8ba68dd38210ecb191bfef3b816b0349715942a28af82e349907751b8363cbdfdec8f6787419f5fd5e58253188ca06be95e7fb9a523850f601bdc02fb1af59911794208a99b1f3a6736cc6a283bd56"}, {0x6c, 0x84, 0x4, "efd157c881d787ddd5c478a14ccf644c998897f1c39484a997f6628285b2abc40f04b53d1a1183e5065650761cb23b7b1664cfa830c86a7d2bffa4818d105f6bb12252f8f09cc3d9b19385651ac607281ca5c12169d18361042682b363"}], 0xc8}, 0x40014) pwrite64(r2, &(0x7f0000000200)="48e7d11c93965664f41a8ffaf45a32f666249fb0e3129887d933e48aa961ecea5f0c397238119ab200750df67ed6ef420cc18028a77b5392044b7470fa58bc4d911c05ba0febf8d9e32d60198ff95bcf8f59e5b6142e2efadc67861f90087ae8ce3702d27a6337117d1851623bc8f75a8a3156c62c29436a586e8485735f5e28329472d53b9e41c7b8fe48938cf7486fac38497ab92a52fe9d5c2ec4dc3d1bfd2181b015fb6d81158c3e6e46", 0xac, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/35) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x200, 0x401, 0x6, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x2, 0x20}, 0xc) 16:17:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x60040, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r3, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x795}, 0x8) close(r0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000003c0)={0x9b0000, 0x10001, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffffa, [], @string=&(0x7f0000000340)=0x5}}) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x3ff) r5 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x121103, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x42180, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRES16=r6, @ANYBLOB="04000e4d0ebfff5f1402883e0984350c090400280091598e8cafbdda2d5dd78140bb77d4714a69632143e92a000000000000000000002e354208151ae2eb6ba45e07b3385440ee946222b7dba7ddd8c9cae62b6bd2a48a568280d2cec6fd7cbac44ad8be2c4789a8fbca097ff7780dcc3cf7a675790274c811aa567894af3b076a19fd60b1a14a2b7c18ff9250a2dd45e97242ba13f5ccf2c51a096d8bb0c5b8189ac71cee27ffa866eeee2b7d0936ed3421031ec6bb45cebe6f226ade49af39cc1a0bc55e245485ddef332663a118e4fe96e21a80dca01618a5c74e7b51c959be655de6818289bf6b90410517a7d060bcef140a0bb4c8a820617bf51d91d8073483c3463352e5c91865b27a1f5a307ffbf6df95553e9b795b"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x1c4537e46949b113) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x190, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x76, 0xac, "ed39e891202789b157fa3ea29a4b35ea24e837f979175b3469fc9c43b38765d9d445f4e70d483d16e43ac4a959a4d1e419d0d8660e45fe3b37871a81d1ef89c838c3bb578c01126fcc333ed27f1a00d487c15a6551410090e905963af29f85480d960dff2e14b62ce440f0364815fc550fe9"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf2, 0xac, "27ed303850e8506da5ba69d3b8032833c11a0fd7e3f54ca322dc594c867188084aaa56fe7b1584408633892fb2216fea18d0594b24d63b9469c4e6ae11d50c0d8d7401b64ba25aea1114477d26a8d268884b3a78fdf092cc2f49542fa7bde65e186b78888af99e83ffb9bd75a77a667c06e4042fc10281a71696988022293b44f03a699bc6d24f06b3e0ee63e7d98789f15b670d47021e376fd00489d8b8d533da126eaf8d17f4bd93d353ec7c79340d6a7b1cf6f0061b5361b110615ceda55d474ab0f12fa24a478bbdddf0b1e76a8f440f3d33516d8e574f7137bb9dbf94d97b5fd4bfa20ed251db0ec8e2d14f"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x362}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 16:17:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 694.048833][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40106308}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 694.187929][ T3338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 694.401739][T22583] IPVS: ftp: loaded support on port[0] = 21 [ 694.438017][ T3338] usb 3-1: Using ep0 maxpacket: 16 [ 694.558165][ T3338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.581352][ T3338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.594065][ T3338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.718722][ T3338] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 694.727949][ T3338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 694.736022][ T3338] usb 3-1: SerialNumber: syz [ 694.750556][ T3338] usb 3-1: config 0 descriptor?? [ 695.208358][ T3338] usbhid 3-1:0.0: can't add hid device: -71 [ 695.214587][ T3338] usbhid: probe of 3-1:0.0 failed with error -71 [ 695.227725][ T3338] usb 3-1: USB disconnect, device number 16 [ 695.837985][T21811] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 696.077967][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 696.228117][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.239098][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.250991][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.338763][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 696.348315][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 696.356439][T21811] usb 3-1: SerialNumber: syz [ 696.368317][T21811] usb 3-1: config 0 descriptor?? 16:17:48 executing program 2: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="45943dabd60d8559b27f97b7a5e512210000000000105e04f587000000001e010902240001000000000904000009030000"], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) setns(r1, 0x20000) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], 0x0}, 0x0) keyctl$session_to_parent(0x12) 16:17:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8980, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r0}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r5, 0x5}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r6, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000140)={0x40, 0x1000, 0xf0f, 0xc1, 0x1}) ioctl$TCSETX(r6, 0x5433, &(0x7f0000000000)={0x7, 0x373, [0x5, 0x4, 0x0, 0x3, 0xa56c], 0x9}) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f0000000080)=0x7) splice(r7, 0x0, r9, 0x0, 0x10005, 0x0) write$P9_RREMOVE(r7, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) 16:17:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40106309}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 696.745096][T22681] IPVS: ftp: loaded support on port[0] = 21 [ 696.808162][T21811] usbhid 3-1:0.0: can't add hid device: -71 [ 696.814483][T21811] usbhid: probe of 3-1:0.0 failed with error -71 [ 696.831135][T21811] usb 3-1: USB disconnect, device number 17 16:17:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40406300}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40406301}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:49 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010000108000000008000000000000000000100006ae20e8836d3564a823ae32f99e5c452", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x1, r3, 0xe, r4}, 0x10) 16:17:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 697.338023][T21811] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 697.379915][T22681] IPVS: ftp: loaded support on port[0] = 21 [ 697.410014][T22742] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.441066][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 697.466725][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 697.482825][T22743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.628042][T21811] usb 3-1: device descriptor read/64, error 18 [ 698.017970][T21811] usb 3-1: device descriptor read/64, error 18 [ 698.297993][T21811] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 698.588018][T21811] usb 3-1: device descriptor read/64, error 18 [ 698.988047][T21811] usb 3-1: device descriptor read/64, error 18 [ 699.110578][T21811] usb usb3-port1: attempt power cycle 16:17:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x5, 0x10c1000, 0xff, 0x400, 0x4, 0x2}}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8983, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:17:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40486311}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000080)=0xf2c7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:51 executing program 0: r0 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = dup3(r2, r0, 0x80000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) ioprio_get$uid(0x0, r4) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000000)={0xfff, 0x8, {0xffffffffffffffff}, {r4}, 0x7, 0x8}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4, 0x8001, @private1, 0x132}, {0xa, 0x4e22, 0x776038e2, @empty, 0x5}, 0x5, [0x5, 0x8000, 0xd2d2, 0x8, 0x3ff, 0xffffffad, 0x0, 0x3]}, 0x5c) [ 699.812856][T22778] IPVS: ftp: loaded support on port[0] = 21 [ 699.827999][T21811] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 699.863965][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)=""/59, &(0x7f0000000040)=0x3b) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 699.929829][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40486312}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x799}, 0x8) prctl$PR_SET_TSC(0x1a, 0x3) close(r0) 16:17:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 700.126884][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:52 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cramfs\x00', 0x8, &(0x7f0000000100)='\x00') write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) [ 700.197775][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 700.308098][T21811] usb 3-1: device not accepting address 20, error -71 [ 700.462706][T22778] IPVS: ftp: loaded support on port[0] = 21 [ 700.700470][T21811] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 700.798743][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 700.918284][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.929360][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.942258][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.028171][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 701.037327][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 701.045713][T21811] usb 3-1: SerialNumber: syz [ 701.056117][T21811] usb 3-1: config 0 descriptor?? [ 701.750354][T21811] hid-multitouch 0003:045E:87F5.0027: unknown main item tag 0x0 [ 701.758381][T21811] hid-multitouch 0003:045E:87F5.0027: unknown main item tag 0x0 [ 701.766969][T21811] hid-multitouch 0003:045E:87F5.0027: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 701.955476][ T3335] usb 3-1: USB disconnect, device number 21 [ 702.738039][ T3335] usb 3-1: new high-speed USB device number 22 using dummy_hcd 16:17:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6b64943c5c53fe200000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:17:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x630c}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:54 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f0000000000)={0xffffff01, 0x1, 0x4, 0x100000, 0xfff, {}, {0x2, 0xc, 0x9, 0x6, 0x3, 0x9, "240dc5a9"}, 0x5, 0x2, @offset=0xd6d, 0x4, 0x0, r1}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x80000001, 0xfffffffe, 0x7, 0x5, 0xf, "1b2e39263917601012b184ee384094711c421b"}) 16:17:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8990, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 702.901444][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 702.914246][T22890] vivid-001: disconnect [ 702.925831][T22886] vivid-001: reconnect [ 702.943099][T22896] vivid-001: disconnect 16:17:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 702.952517][T22893] IPVS: ftp: loaded support on port[0] = 21 [ 702.971942][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 702.985396][T22886] vivid-001: reconnect 16:17:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x630d}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:55 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0090891cf4eeefc517ddde9a1ad5efdcc36f8cd4cda8ccc765bb0675cc8ff159cf9e0ba0ef251bf30a7a422cd98968b0d93830c10c129ccbbb5555ee1f3f3d5f319b193918d6982b6a898294b8de08fba76bc42ca548fc48258150908b0941dde35d33da9e8ef45bb204f8d79ec62094a9b9ba8b33e756ecf14aa25a865e93b4277a10d28db4753e7af515d4000000006761666501ce4dc2270c4146ff7c344499f816ae587e3420f0b3cba1200979e9d14ce471fe2078e8dda7e230e2312ecdbe8482c23711fc5948c667b35217a1", @ANYRES16=r2, @ANYBLOB="010005000000fddbdf2506000000050013002000000008000c00030000000500040020000000"], 0x2c}}, 0x240480c4) 16:17:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:55 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) [ 703.211722][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 703.498215][ T3335] usb 3-1: Using ep0 maxpacket: 16 [ 703.550050][ T3335] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 703.624067][T22893] IPVS: ftp: loaded support on port[0] = 21 [ 703.698396][ T3335] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 703.706018][ T3335] usb 3-1: can't read configurations, error -61 [ 703.888158][ T3335] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 704.168892][ T3335] usb 3-1: device descriptor read/64, error 18 [ 704.558147][ T3335] usb 3-1: device descriptor read/64, error 18 [ 704.678306][ T3335] usb usb3-port1: attempt power cycle [ 705.388115][ T3335] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 705.478556][ T3335] usb 3-1: Invalid ep0 maxpacket: 67 [ 705.628080][ T3335] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 705.718737][ T3335] usb 3-1: Invalid ep0 maxpacket: 67 [ 705.724193][ T3335] usb usb3-port1: unable to enumerate USB device 16:17:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c254c8e9f469c10989176b86d01cda06e53f070d0000082a9000170900be0083cb236a9f7db4bcf58e4e77764e58e869a52be61a9fdf1bdd6d113467c90f6e4d754b1051a0bbbef8e30cc59d043010065a5893b0fe7f2e058c1363e06705346e4855d3863208c26a6f53506784a84a345bb81c8f504005e2fe4ff7c5acc3b64ed2702e9daf1169c031fdfc2e14a6df2d32a44f"], 0x0}, 0x0) r1 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x24a02, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @empty}, {0x1, @multicast}, 0x26, {0x2, 0x4e21, @rand_addr=0x64010101}, 'vlan1\x00'}) 16:17:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x6310}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x40, @loopback, 0x8}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:57 executing program 0: mq_open(&(0x7f0000000000)='&selinuxbdev-\x00', 0x80, 0x0, &(0x7f00000007c0)={0x8002, 0x6599, 0x10000, 0xbe1}) r0 = socket$inet(0x2, 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x104002) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000180)={[], 0x1ff, 0x2, 0x3ff, 0x1, 0x9, r3}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x7, 0x181e, [0x20000800, 0x0, 0x0, 0x20000a08, 0x200014fc], 0x0, &(0x7f00000001c0), &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x186e) rt_sigreturn() 16:17:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8992, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 705.994965][T22974] binder: 22969:22974 unknown command 25360 [ 706.033376][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 706.036624][T22975] IPVS: ftp: loaded support on port[0] = 21 [ 706.056439][T22974] binder: 22969:22974 ioctl c0306201 200000c0 returned -22 [ 706.083810][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:17:58 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='&selinuxbdev-\x00', 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/105, 0x69) [ 706.092656][T22979] binder: 22969:22979 unknown command 25360 [ 706.116513][T22979] binder: 22969:22979 ioctl c0306201 200000c0 returned -22 16:17:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) listen(r1, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x45ee, 0x800a, 0x2, 0x4, 0x6, 0x40, 0x2, r6}, &(0x7f0000000140)=0x20) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:17:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x6312}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:17:58 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x41, 0x0, &(0x7f00000007c0)={0x8000, 0x65b9, 0x10003, 0xbe1}) 16:17:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 706.386899][T23013] binder: 23004:23013 unknown command 25362 [ 706.408431][T21811] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 706.434581][T23013] binder: 23004:23013 ioctl c0306201 200000c0 returned -22 [ 706.473216][T23023] binder: 23004:23023 unknown command 25362 [ 706.485233][T23023] binder: 23004:23023 ioctl c0306201 200000c0 returned -22 [ 706.658202][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 706.779131][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.807797][T22975] IPVS: ftp: loaded support on port[0] = 21 [ 706.818425][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.852343][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.978845][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 706.998087][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 707.015421][T21811] usb 3-1: SerialNumber: syz [ 707.039493][T21811] usb 3-1: config 0 descriptor?? [ 707.750285][T21811] hid-generic 0003:045E:87F5.0028: unknown main item tag 0x0 [ 707.775450][T21811] hid-generic 0003:045E:87F5.0028: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 707.957037][ T3335] usb 3-1: USB disconnect, device number 26 [ 708.738218][ T3335] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 708.988091][ T3335] usb 3-1: Using ep0 maxpacket: 16 [ 709.109339][ T3335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.120362][ T3335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.131571][ T3335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr, 0x8}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x6314}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8993, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 709.220212][ T3335] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 709.229479][ T3335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 709.237907][ T3335] usb 3-1: SerialNumber: syz [ 709.247378][ T3335] usb 3-1: config 0 descriptor?? 16:18:01 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x1) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x7ffe, 0x659a, 0x10001, 0xbe1}) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x391e1a153446ad84, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r3, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0xa93a2b832570577e, 0xffffffffffffffff}) dup2(r2, r4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ce7e76f7a68560cfbd38d1b37ebf0653", 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0xa372) 16:18:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32=r2, @ANYRES64, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRESDEC=r2], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 709.307783][ T3335] usb 3-1: can't set config #0, error -71 [ 709.346726][ T3335] usb 3-1: USB disconnect, device number 27 [ 709.371843][T23088] binder: 23079:23088 unknown command 25364 [ 709.396052][T23085] IPVS: ftp: loaded support on port[0] = 21 16:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 709.419844][T23088] binder: 23079:23088 ioctl c0306201 200000c0 returned -22 16:18:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x40}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:01 executing program 0: r0 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={{0x0, 0x0, @descriptor="19588cdd0c096508"}, 0x71, [], "b7b58e70d04b042c196ba4b823e1f3d47697230e3662691780dfc891183b9ab4f8e0951782ed86d5957ffbc269867a45e68336cdaba9e9fe2dc27c37437aeec29a62e5c12d1a47885ee5a5e26ca0880bec3a36eca05aba208dd1ccde77c3d941477593e974451a4b1fc0790e4520a2458e"}) [ 709.466066][T23094] binder: 23079:23094 unknown command 25364 [ 709.510394][T23094] binder: 23079:23094 ioctl c0306201 200000c0 returned -22 16:18:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40046302}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000580)={0x101, 0x8000}) add_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="bce08e06cb25eba86d1f7041f26c75a93990ed4664a5d2d3dc", 0x19, r1) keyctl$search(0xa, r1, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)="6d76a3090104dae314452f5a1a6b3fbfe82eee4796ac54429c41615a22b9324510124a2090041de2735aaf5cecc9c043c82a663cc77e87d6cfffa0b343bda0d27aad77bf57f075d02156961257d3a63fc7a37e087b60f7a660c193b3f571f7193479487e56693e1c731569aa81f5966931d704f90a6394da04878a6b1e96a5b766ca2281c426223425eefae266e350a2e826760f127c09c8e4285d11db0467240e543f02d3146ff3ae40239731d374de781eeb9940cee358d3906647da5f9032fddee65b474b6f0fcbc149aa71eb09717be132960196", 0xd6, r1) r2 = openat$vcs(0xffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x20a000, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000640)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000005c0)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, 0x0) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)="6d76a3090104dae314452f5a1a6b3fbfe82eee4796ac54429c41615a22b9324510124a2090041de2735aaf5cecc9c043c82a663cc77e87d6cfffa0b343bda0d27aad77bf57f075d02156961257d3a63fc7a37e087b60f7a660c193b3f571f7193479487e56693e1c731569aa81f5966931d704f90a6394da04878a6b1e96a5b766ca2281c426223425eefae266e350a2e826760f127c09c8e4285d11db0467240e543f02d3146ff3ae40239731d374de781eeb9940cee358d3906647da5f9032fddee65b474b6f0fcbc149aa71eb09717be132960196", 0xd6, r3) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000140)=[{&(0x7f0000000080)="35756a2e144177fd9b9efdd3e7d631115b157fffda5b9bc0f5cff0be8ec556db09f901fe9fa5bb6a55c2a49b5afe9503a21e16026f80ff32a4ca29d59ac4c0e743038b29c01027c49e948082f7762e2039f2a9740a8e133ae76ff34502abc1b46cd0178be0ab7cabb88a08a959f0c7", 0x6f}, {&(0x7f00000001c0)="ebb6ed2dc6bc10118eee134a28155cb1a74fed24779172f208525e7a81ef02baad080ac7525986c807ecc93e7f3c9ad1fa8c48adb24c93179f16b7ef57603f0565edf542b8780225472a3c690c74f1d3fade7c0a2d2cd59664142ee4f60b55655b15b4479f889efec93caa5452cbefb4ecfe66ab96ee139fa1b57955d39c0032106ea165c7884c266dbf2af4c96c76c4c0f0054f79245525e0e113", 0x9b}, {&(0x7f0000000100)="9061377b242a7156ddedda2d65fc5ea120f4a187ba64678ef5388b8904776104912942592d673e4e141ae20fe91429f7944f8f12fb058ddcd1e56288b73b", 0x3e}], 0x3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:01 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) read$char_usb(r1, &(0x7f0000000080)=""/151, 0x97) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x101, @mcast1, 0x5}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x1f, @private1, 0x1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}], 0x68) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000040000800040015eb3a00c5e195b896cc575bcd7d05f63b91d95f1f8fc31712751f3cef3885d3867cc1418a2a8a446b0b67148cf359e5dc07b560ad232c1a8f7967ed35a9dbc1f33c90d7dd06c2bdf73733537a803ee6ce77f5e8588f820a65a3203e74c6d51da374bec76ceb512a29f586c19e73", @ANYRES32=r9, @ANYBLOB="08001beee117a25a"], 0x30}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x730, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x704, 0x8, 0x0, 0x1, [{0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @empty, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5cfd93fed7e7e4f9cb903762db730f0d2bf6ce4f1ee61336cabc2a86b7c6fe0a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37e5e68dd56b0fb47b4320a6704c48c563c8e5c8223277cb137c6f6c0ee410a9"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46ba20317b917e0e2f9d42dbd7d4dcf28740814b4379197b8841338cb80778c5"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x361}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8e8c5f30383aa4ae869ddc2cc9ca0a8408493cf0cfd4066350c9aedca3202afe"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x100, @empty, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x21}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x8}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x81}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00', 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a52d747119a101042e719f706b5eed37f809f4b6850b6620c898ac4867d7444"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "642c401b30c4135b0d9a572df71742ee3554a45f17fa068a67080d256574c3cf"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @loopback, 0x7ff}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c2895182a66309e399878d82cf56f8fe779736ceacc75751eead99d6b64e931"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private1, 0x101}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b976475ed5775d88e11c9d702cceb0b6f08cef024ecfe4d8fc90282bae225ac0"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x730}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 709.737639][T23128] binder: BC_ACQUIRE_RESULT not supported [ 709.751635][T23128] binder: 23124:23128 ioctl c0306201 200000c0 returned -22 [ 709.777053][T23128] binder: BC_ACQUIRE_RESULT not supported 16:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 709.797819][T23128] binder: 23124:23128 ioctl c0306201 200000c0 returned -22 [ 709.808220][ T3335] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 709.833730][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:18:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40046304}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 709.890602][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 709.959831][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 710.088500][ T3335] usb 3-1: device descriptor read/64, error 18 [ 710.154955][T23085] IPVS: ftp: loaded support on port[0] = 21 [ 710.478151][ T3335] usb 3-1: device descriptor read/64, error 18 [ 710.651065][T23134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 710.748142][ T3335] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 710.768876][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 711.028321][ T3335] usb 3-1: device descriptor read/64, error 18 [ 711.418155][ T3335] usb 3-1: device descriptor read/64, error 18 [ 711.538341][ T3335] usb usb3-port1: attempt power cycle [ 712.258191][ T3335] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 712.428190][ T3335] usb 3-1: device descriptor read/8, error -71 [ 712.649346][ T3335] usb 3-1: device descriptor read/8, error -71 16:18:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8994, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = socket(0xa3a20ff7955ad9e9, 0x3, 0x6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r6, 0x3, 0xff, 0xb6}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40046307}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x40a01) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x200, [0x6, 0xc1e, 0x81, 0x1ff, 0x0, 0x8, 0x6, 0x7fff, 0x4, 0x1, 0x20, 0xfd54, 0x1ff, 0x6, 0x7ff, 0x9, 0x7, 0x6, 0x3ff, 0x1ff, 0x8, 0x1, 0x2, 0x7, 0x5, 0x9, 0xff, 0x3ff, 0x3, 0x8001, 0x8, 0x400, 0xff4e, 0x101, 0x2, 0x2, 0xbe, 0x8001, 0x401, 0x0, 0x4, 0x1, 0x401, 0x1000, 0x1, 0x7fff, 0x2, 0x4], 0xe}) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)) 16:18:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:18:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:05 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="8404000000000000010500000000000718000000000480060004000000000000000000f8aa0100000000"], 0x30) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 713.201549][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:18:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40086303}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 713.262170][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 713.293980][T23193] IPVS: ftp: loaded support on port[0] = 21 16:18:05 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8993, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:05 executing program 0: r0 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) sendfile(r2, r0, &(0x7f0000000140)=0x8, 0x10001) getsockname$packet(r1, 0x0, &(0x7f0000000540)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x20004044) 16:18:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 713.489366][T23215] IPVS: ftp: loaded support on port[0] = 21 [ 713.668449][ T3335] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 713.768556][ T3335] usb 3-1: Using ep0 maxpacket: 16 [ 713.905282][ T3335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.923673][T23193] IPVS: ftp: loaded support on port[0] = 21 [ 713.938197][ T3335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.972439][ T3335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8995, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x4008630a}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:06 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_procfs(r0, &(0x7f0000000000)='fd/4\x00') setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x72, 0x9, 0x0, 0xfbff]}, 0xc) 16:18:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 714.118205][ T3335] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 714.127306][ T3335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 714.151367][T23282] binder: BC_ATTEMPT_ACQUIRE not supported [ 714.165885][T23282] binder: 23278:23282 ioctl c0306201 200000c0 returned -22 [ 714.184685][ T3335] usb 3-1: SerialNumber: syz [ 714.190845][T23285] IPVS: ftp: loaded support on port[0] = 21 [ 714.197618][T23282] binder: BC_ATTEMPT_ACQUIRE not supported [ 714.204556][T23282] binder: 23278:23282 ioctl c0306201 200000c0 returned -22 16:18:06 executing program 1: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010000108000000008000000000000000000100006ae20e8836d3564a823ae32f99e5c452", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x1, r3, 0xe, r4}, 0x10) [ 714.222197][ T3335] usb 3-1: config 0 descriptor?? [ 714.327346][T23300] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 714.567203][T23285] IPVS: ftp: loaded support on port[0] = 21 [ 714.940057][ T3335] hid-multitouch 0003:045E:87F5.0029: unknown main item tag 0x0 [ 714.947997][ T3335] hid-multitouch 0003:045E:87F5.0029: unknown main item tag 0x0 [ 714.957442][ T3335] hid-multitouch 0003:045E:87F5.0029: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 715.145628][ T9667] usb 3-1: USB disconnect, device number 31 [ 715.928317][ T9667] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 716.188246][ T9667] usb 3-1: Using ep0 maxpacket: 16 [ 716.318366][ T9667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.333020][ T9667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.343283][ T9667] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 716.448319][ T9667] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 716.457429][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 716.466049][ T9667] usb 3-1: SerialNumber: syz [ 716.474899][ T9667] usb 3-1: config 0 descriptor?? 16:18:08 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 16:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper={0x40086303}, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40086310}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000040)={0xa00000, 0x100, 0x3, r1, 0x0, &(0x7f0000000000)={0x9909d1, 0x3, [], @value=0x6}}) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x48000) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:18:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89a0, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 716.498233][ T9667] usb 3-1: can't set config #0, error -71 [ 716.524332][ T9667] usb 3-1: USB disconnect, device number 32 [ 716.575695][T23366] vivid-001: disconnect [ 716.593984][T23365] IPVS: ftp: loaded support on port[0] = 21 16:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x400c630e}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r3}) open(&(0x7f0000000100)='./file0\x00', 0x105000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 716.634310][T23360] vivid-001: reconnect [ 716.646327][T23366] vivid-001: disconnect [ 716.674219][T23360] vivid-001: reconnect 16:18:08 executing program 0: mq_open(&(0x7f0000000100)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_QUERYBUF(r0, 0xc0445609, &(0x7f0000000180)={0x8b86, 0xc, 0x4, 0x40000000, 0x3ff, {0x0, 0xea60}, {0x1, 0x1, 0x5, 0x9, 0x45, 0x75, "49c4d893"}, 0x1000, 0x3, @planes=&(0x7f0000000140)={0x80000000, 0x8, @fd=r1, 0x5}, 0x6, 0x0, r2}) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000200)=""/103, &(0x7f0000000280)=0x67) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 16:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:08 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x7ffc, 0x6599, 0x10001, 0xbe1}) [ 716.947484][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:18:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x6, 0x4, 0xfffffff7, 0x400, 0x4, 0x34, 0x12}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:18:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x400c630f}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r3}) open(&(0x7f0000000100)='./file0\x00', 0x105000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:09 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x659e, 0x10001, 0xbe4}) [ 717.341357][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 717.406101][T23365] IPVS: ftp: loaded support on port[0] = 21 [ 717.608599][ T9667] usb 3-1: new high-speed USB device number 33 using dummy_hcd 16:18:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:09 executing program 0: mq_open(&(0x7f0000000000)='&selinuxbdev-\x00\x89\xc0\bu\xc5}\\\x05|\f\x14Ym\x11\xe3Hyq\x14\xcb\xe8vB<\x03\xcc\nf\x9d[\xd3\x82\ahq\x85\x06\xb8Uk\xb1\x827\b\xbc\xb5\xd1\x99\xd1Z\xc7\x0f\x85\f\xf6\x84\xc1\xbaj^\xea\xc1\xf2\xa5i\xa8\xffn\x81\xbe\x0f\xbf\xdb\x13O\x89\xea\xfe~j\x18\xbfx\xf8\xc5\xd2F\xd0\xe3\a\xbc\xe8\x9d\xf9t\x1c\x81\x9bQY\x84\xc2\xc6=\xab\x90\xaf\x1f+K\xd4l\xd7l\t\'\xde^\xed{\xd98\x15\xbb\xca\xfbA<\x17\xb1\xe4\xcc \x1c\xc6G\x1f\xee\xd0\xd4\xeffzf%\x80\xfaZr\xed\xcfG\xdbj\xf9T\xd0\xfb4\x1f\xc0\xdd\xf3\xf7\x0fD\xdd\"\xe7\xa7\xb1v\xf8,\xf3\x83\x85\xeaV\x843y\x03uO\x8e\xf1\x8f\xf6z\xf6t\xfce@\xf0;\xb4\x8e\b\x94i\xbe^M\a\\f@g\x8eb', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:18:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40106308}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r3}) open(&(0x7f0000000100)='./file0\x00', 0x105000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) [ 717.722346][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:18:09 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x50) ioctl$VIDIOC_QUERYBUF(r0, 0xc0445609, &(0x7f0000000380)={0x1ff, 0x4, 0x4, 0x80000, 0x4, {0x77359400}, {0x5, 0x1, 0x40, 0x1, 0x5, 0x2, "8aebea04"}, 0xffffffff, 0x1, @planes=&(0x7f0000000340)={0x2c55, 0x80, @fd, 0x80000001}, 0x23, 0x0, r1}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000400)=@ccm_128={{0x303}, "827c510236bc5326", "c3bfd3cddde64a4d298c7b52f2d315d1", "b1627e1c", "56a4ed14f3a13625"}, 0x28) 16:18:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 717.791222][T23463] IPVS: ftp: loaded support on port[0] = 21 [ 717.878287][ T9667] usb 3-1: Using ep0 maxpacket: 16 [ 717.906715][T23472] vivid-001: disconnect [ 717.935303][T23467] vivid-001: reconnect [ 717.943218][T23477] vivid-001: disconnect [ 717.951623][T23467] vivid-001: reconnect [ 718.009212][ T9667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.027100][ T9667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.050213][ T9667] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.179849][ T9667] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 718.195200][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 718.203938][ T9667] usb 3-1: SerialNumber: syz [ 718.225341][ T9667] usb 3-1: config 0 descriptor?? [ 718.265251][T23463] IPVS: ftp: loaded support on port[0] = 21 [ 718.930601][ T9667] hid-multitouch 0003:045E:87F5.002A: unknown main item tag 0x0 [ 718.938570][ T9667] hid-multitouch 0003:045E:87F5.002A: unknown main item tag 0x0 [ 718.947928][ T9667] hid-multitouch 0003:045E:87F5.002A: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 719.138521][T21743] usb 3-1: USB disconnect, device number 33 [ 719.908217][T21743] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 720.148279][T21743] usb 3-1: Using ep0 maxpacket: 16 [ 720.268353][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.279394][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.289815][T21743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 720.378327][T21743] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 720.387513][T21743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 720.396383][T21743] usb 3-1: SerialNumber: syz [ 720.405009][T21743] usb 3-1: config 0 descriptor?? 16:18:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$6lowpan_control(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r3}) open(&(0x7f0000000100)='./file0\x00', 0x105000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) close(r0) 16:18:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40106309}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:12 executing program 0: setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', r5}) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000540)) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000000080)) 16:18:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89a2, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES64=r2], 0x0}, 0x0) [ 720.479489][T21743] usb 3-1: can't set config #0, error -71 [ 720.509485][T21743] usb 3-1: USB disconnect, device number 34 [ 720.565785][T23546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 720.584063][T23547] IPVS: ftp: loaded support on port[0] = 21 [ 720.604291][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40406300}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 720.687247][T23546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 16:18:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:12 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8003, 0x6599, 0x10001, 0xbe1}) 16:18:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40406301}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 720.975081][T23580] IPVS: ftp: loaded support on port[0] = 21 16:18:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 721.038267][T21743] usb 3-1: new high-speed USB device number 35 using dummy_hcd 16:18:13 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x20, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) 16:18:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40486311}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 721.278875][T21743] usb 3-1: Using ep0 maxpacket: 16 [ 721.399143][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.431885][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.489342][T21743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.585573][T23547] IPVS: ftp: loaded support on port[0] = 21 [ 721.629020][T21743] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 721.655564][T21743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 721.702301][T21743] usb 3-1: SerialNumber: syz [ 721.729217][T21743] usb 3-1: config 0 descriptor?? 16:18:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89a3, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 721.947556][T23654] IPVS: ftp: loaded support on port[0] = 21 [ 722.142688][T23654] IPVS: ftp: loaded support on port[0] = 21 [ 722.508366][T21743] usbhid 3-1:0.0: can't add hid device: -71 [ 722.514834][T21743] usbhid: probe of 3-1:0.0 failed with error -71 [ 722.526770][T21743] usb 3-1: USB disconnect, device number 35 [ 723.228330][T21811] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 723.478296][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 723.609301][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.620459][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.631679][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 723.718921][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 723.728269][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 723.736455][T21811] usb 3-1: SerialNumber: syz 16:18:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper={0x40486312}], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:15 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r0}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffaa, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000040)={0x3, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f0000000080)={0xffffffff, r3, 0x10001, 0x1}) 16:18:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:15 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8946, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89b0, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 723.792871][T21811] usb 3-1: config 0 descriptor?? [ 723.810785][T21811] usb 3-1: can't set config #0, error -71 16:18:15 executing program 2: acct(0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001a0109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4044006}, 0x48010) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x1fd}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r5, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x9, 0x1, 0x800, 0x3f}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r6, 0x57, "b09e4a14e3e799c33342dea32660588a8e9e41f5f96a5f142388ca9f1ac107f3658a6569cdc53192a18175e443b7785c500f7c23256204d6ef02bc0c67b64bb0c6d4c5c2ba75d36f2cca5c321f825568e4f8fa883ebeda"}, &(0x7f0000000380)=0x5f) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000200962303020f0158270c4ac2c206e53f0700170900be008300edff000000"], 0x0}, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) 16:18:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 723.856660][T21811] usb 3-1: USB disconnect, device number 36 [ 723.873656][T23716] IPVS: ftp: loaded support on port[0] = 21 [ 723.884609][T23717] IPVS: ftp: loaded support on port[0] = 21 16:18:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x2, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:16 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r5 = socket$inet(0x2, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYRES64=r7, @ANYRES16=r0, @ANYBLOB="e9466764d40421ce031f421917290aada95f4c0c330f71825489a80fa9f51f18f34076abbd34fa98", @ANYRESDEC=r3, @ANYRES16, @ANYRESOCT=r4, @ANYRES32, @ANYRESOCT], 0x1) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x3ff) mq_open(&(0x7f0000000000)='&selin\xb5\x10\x06`C\x1b\xf3j\t]^\x9c?\xbb\xf0q:DV\xca1\x8fBq\x05\x11\x19\x15\x15UR2<', 0x841, 0x198, &(0x7f00000007c0)={0x3, 0x6599, 0x10004, 0x6}) r8 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8793, 0x200000) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xa61, 0x20000) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x1, 0x5, 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000100)) 16:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 724.153342][T23761] binder: 23750:23761 ioctl c0306201 200000c0 returned -14 [ 724.215469][T23779] binder: 23750:23779 ioctl c0306201 200000c0 returned -14 16:18:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x3, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 724.318383][T21811] usb 3-1: new high-speed USB device number 37 using dummy_hcd 16:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 724.435533][T23790] binder: 23788:23790 ioctl c0306201 200000c0 returned -14 16:18:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x4, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 724.588452][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 724.635480][T23716] IPVS: ftp: loaded support on port[0] = 21 [ 724.636620][T23800] binder: 23799:23800 ioctl c0306201 200000c0 returned -14 [ 724.656606][T23800] binder: 23799:23800 ioctl c0306201 200000c0 returned -14 [ 724.719467][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.749496][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.774827][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 724.879114][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 724.903002][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=26 [ 724.936330][T21811] usb 3-1: SerialNumber: syz [ 724.955435][T21811] usb 3-1: config 0 descriptor?? 16:18:17 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89b0, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 725.150304][T23833] IPVS: ftp: loaded support on port[0] = 21 [ 725.938353][T21811] usbhid 3-1:0.0: can't add hid device: -71 [ 725.944356][T21811] usbhid: probe of 3-1:0.0 failed with error -71 [ 725.953506][T21811] usb 3-1: USB disconnect, device number 37 [ 726.648803][T21743] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 726.938415][T21743] usb 3-1: device descriptor read/64, error 18 16:18:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ubifs\x00', 0x4000, 0x0) 16:18:19 executing program 0: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mq_open(&(0x7f0000000280)='&selinuxbdev-\x00', 0x40, 0x30d, &(0x7f00000007c0)={0x8000, 0x106599, 0xaa, 0xbe1}) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x404200, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000300)={0xf5dffff, 0x40, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x990afb, 0xffff8001, [], @value=0xff}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r1}}, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r8, @in={{0x2, 0x4e21, @loopback}}, 0x1ff, 0x161, 0x8000, 0x1, 0x32, 0xc91b}, &(0x7f0000000400)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={r9, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb93, 0x1f, 0x8, 0x4dcb9695}, &(0x7f0000000500)=0x98) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r5, 0x80, "1e9f35", "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"}}, 0x110) 16:18:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x5, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:19 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89b1, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:19 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8942, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 727.138011][T23875] binder: 23869:23875 ioctl c0306201 200000c0 returned -14 [ 727.159049][T23878] IPVS: ftp: loaded support on port[0] = 21 16:18:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x6, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 727.184350][T23876] vivid-001: disconnect [ 727.189551][T23877] IPVS: ftp: loaded support on port[0] = 21 [ 727.287203][T23870] vivid-001: reconnect [ 727.321053][T23876] vivid-001: disconnect 16:18:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 727.392823][T23870] vivid-001: reconnect 16:18:19 executing program 0: mq_open(&(0x7f0000000040)='&selinu\xdf\x88\xc2\xaaA\x8c\x94\xae\xb6\xfb\x00\x00bdev-\x00', 0x40, 0x80, &(0x7f0000000000)={0x8000, 0x6599, 0x10001, 0xbe1}) [ 727.568444][T21743] usb 3-1: device descriptor read/64, error -71 16:18:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:19 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x52, 0x200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000030000003cc77adf568e474f1cda14576c9ba39198e935c75ea35dcc647dd614ac90e04b5600002a69d6e374e044dd49233877", @ANYRES32, @ANYBLOB="0000000000f0ffff000000000000010000000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffffffffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000001000010000000000000"]) r4 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'wg1\x00', 0x1000}) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5e89cd0945497497}, 0x4000) [ 727.838382][T21743] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 727.864789][T23951] binder: 23949:23951 ioctl c0306201 200000c0 returned -14 [ 727.912662][T23951] binder: 23949:23951 ioctl c0306201 200000c0 returned -14 [ 728.088315][T21743] usb 3-1: Using ep0 maxpacket: 16 [ 728.096933][T23878] IPVS: ftp: loaded support on port[0] = 21 [ 728.223193][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.262054][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.287840][T21743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.398446][T21743] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 728.407548][T21743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 728.438242][T21743] usb 3-1: SerialNumber: syz [ 728.453055][T21743] usb 3-1: config 0 descriptor?? [ 729.170128][T21743] hid-multitouch 0003:045E:87F5.002B: unknown main item tag 0x0 [ 729.179089][T21743] hid-multitouch 0003:045E:87F5.002B: unknown main item tag 0x0 [ 729.197528][T21743] hid-multitouch 0003:045E:87F5.002B: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 729.372826][T21743] usb 3-1: USB disconnect, device number 39 [ 730.148317][T21743] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 730.418326][T21743] usb 3-1: Using ep0 maxpacket: 16 [ 730.538533][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.549592][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.560799][T21743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00ed01000e59e200000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x402, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000f0e1203d21d57262f66696c6530"], 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0x1e) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1410, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x200240c0) fgetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x3, 0x5, 0x6, 0x8, 0x6, 0x3, 0x0, 0x81, 0x80, 0x8, 0xf8, 0xe0, 0x2, 0x80}, 0xe) 16:18:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x7, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x3f}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x799}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x40003) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000002e0c000000180001801400020073797a5f74756e00000000000000000018000380"], 0x44}, 0x2}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x18}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd7}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 16:18:22 executing program 0: ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000002000000000000000f0ffffffffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0010000000000000", @ANYRES32, @ANYBLOB="0000000000000000010001000000000000000000", @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff0040000000000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff008000f0ff000000", @ANYRES32, @ANYBLOB="0000000000000001000000000020000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000f0ffffffff0080000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=r5, @ANYBLOB="00000000008000000000000000c0ffff00000000"]) r7 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x403c1) ioctl$CAPI_NCCI_OPENCOUNT(r7, 0x80044326, &(0x7f0000000080)=0x9) mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x7598, 0x2, 0xbe1}) 16:18:22 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89e0, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 730.653958][T21743] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 730.669490][T21743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 730.677567][T21743] usb 3-1: SerialNumber: syz [ 730.696766][T21743] usb 3-1: config 0 descriptor?? [ 730.773385][T24011] binder: 24002:24011 ioctl c0306201 200000c0 returned -14 [ 730.781792][T21743] usb 3-1: can't set config #0, error -71 [ 730.794117][T24008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 730.807942][T21743] usb 3-1: USB disconnect, device number 40 16:18:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 730.825922][T24010] IPVS: ftp: loaded support on port[0] = 21 [ 730.857692][T24016] binder: 24002:24016 ioctl c0306201 200000c0 returned -14 16:18:22 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x8, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0x4}) 16:18:22 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x8, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 731.081329][T24044] binder: 24037:24044 ioctl c0306201 200000c0 returned -14 [ 731.096306][T24043] IPVS: ftp: loaded support on port[0] = 21 16:18:23 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x200000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) write$6lowpan_enable(r4, &(0x7f0000000180)='0', 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7b, &(0x7f0000000000)={r2}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000200)={r8, 0x86, "8008ec22b87b6a4e07f9b6c2a8c5e6c0b52c02b2d3b0510600eb0e2c4ad9ef5cd3cbcd26f62a84079c51d5acc1039b2f606a2053be9d57eddf0e47661804310d760c47c2e78f40a8bb9d2e675e1f0bafb2bcc3c1fb6fddedc5b3ae459730b2acbec5dce86f961645946ccd92012c894978a1061cf04f93996558f5833e3cf46d09ffbd322542"}, &(0x7f0000000100)=0x8e) [ 731.160129][T24054] binder: 24037:24054 ioctl c0306201 200000c0 returned -14 [ 731.228376][T21743] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 731.488357][T21743] usb 3-1: Using ep0 maxpacket: 16 [ 731.611331][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.645124][T21743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.656065][T21743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 731.723576][T24014] IPVS: ftp: loaded support on port[0] = 21 [ 731.749595][T21743] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 731.761258][T21743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 731.776906][T21743] usb 3-1: SerialNumber: syz [ 731.787673][T21743] usb 3-1: config 0 descriptor?? [ 732.258386][T21743] usbhid 3-1:0.0: can't add hid device: -71 [ 732.264496][T21743] usbhid: probe of 3-1:0.0 failed with error -71 [ 732.289411][T21743] usb 3-1: USB disconnect, device number 41 [ 732.888595][T21811] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 733.138585][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 733.268507][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.283904][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.297040][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 733.398484][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 733.407613][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 733.417106][T21811] usb 3-1: SerialNumber: syz [ 733.425987][T21811] usb 3-1: config 0 descriptor?? 16:18:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000022000000962303020f015827cb03c2c206e5cc460d840e0000082a9000170900be"], 0x0}, 0x0) 16:18:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x300, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:25 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 16:18:25 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 733.805881][T24144] binder: 24139:24144 ioctl c0306201 200000c0 returned -14 [ 733.842231][T24143] IPVS: ftp: loaded support on port[0] = 21 [ 733.842642][T24144] binder: 24139:24144 ioctl c0306201 200000c0 returned -14 [ 733.878565][T21811] usbhid 3-1:0.0: can't add hid device: -71 [ 733.884883][T21811] usbhid: probe of 3-1:0.0 failed with error -71 [ 733.937098][T21811] usb 3-1: USB disconnect, device number 42 [ 734.338467][T21811] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 734.598372][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 734.728971][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.746767][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.764152][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.859003][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 734.872643][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 734.886024][T21811] usb 3-1: SerialNumber: syz [ 734.914126][T21811] usb 3-1: config 0 descriptor?? 16:18:27 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x89e1, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x500, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:27 executing program 0: r0 = mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x100, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x26, 0x2, @thr={&(0x7f0000000000)="13429e1d96243d5e883dd2ce8713e52c6ad43b6eead13109d07e4f58b017ba7443ce8af42e509c71c4115d4849ed257c93f4cd42c669d73cf43ee8d8cc28a7147b64d1eaf5099bc6e7d8a306e24b8d85f13e2ecd56da", &(0x7f0000000080)="faa9fcc4a5fd7dfe83c3cf6b7aeb83e505932c9bb38bc8d983960e4320eab671aa6035c9d4997e033cb8a0112bff4e1e72bce858d324cb7a98856f4c8493a88b45"}}) 16:18:27 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 735.570532][T24188] binder: 24185:24188 ioctl c0306201 200000c0 returned -14 [ 735.587659][T24190] IPVS: ftp: loaded support on port[0] = 21 [ 735.594132][T24188] binder: 24185:24188 ioctl c0306201 200000c0 returned -14 16:18:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x600, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 735.676348][T24197] IPVS: ftp: loaded support on port[0] = 21 [ 735.682778][T21811] usbhid 3-1:0.0: can't add hid device: -71 [ 735.703289][T21811] usbhid: probe of 3-1:0.0 failed with error -71 [ 735.755503][T21811] usb 3-1: USB disconnect, device number 43 [ 735.867888][T24221] binder: 24211:24221 ioctl c0306201 200000c0 returned -14 [ 735.925938][T24221] binder: 24211:24221 ioctl c0306201 200000c0 returned -14 [ 736.234915][T24197] IPVS: ftp: loaded support on port[0] = 21 [ 736.368423][T21811] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 736.628351][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 736.758488][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.769724][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.780016][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.868557][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 736.877606][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 736.887364][T21811] usb 3-1: SerialNumber: syz [ 736.906034][T21811] usb 3-1: config 0 descriptor?? 16:18:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e2009022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x60, 0x24, 0xc5, {0xc5, 0x2, "c0221599551d3f4f3b68868c5cbc2234698b3d8eac59f8cd553f9841c21dddd3983dfde1bae2adaca1b7964750eab30c9a6aeb4eef63611e6baf59a640cec82fcee1d1fd8e2c033880f9f64f81d68573f9aebbcbecf96b9972793314b50ca6c4682b5d8fac74986e05264720f30cf443dc350b6bcf493b01612d015e277dd68fb3a867eeee5baf609006e403a14b95fffbf722c0c7a6d674b84284c597189ea40a9cc7131e2d39c837f52763d960e03af8547ea6dd114ed6b8f43c94c00597bc623cb9"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000004031d08"], &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0def6f90"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xca, 0x80, 0x1, {0x22, 0xb7f}}}}, &(0x7f0000000500)={0x18, &(0x7f0000000340)={0x20, 0x3d, 0x62, "fd38096adcae29c5e566488d7f4f01446f039c83cc9d7d8e78754ecb1a152b58ca6658f059a26e461c3e9e97fcfc1b734e0105da79739a17fabfe9bc9b5219c5b9f6b5eb6d3ad4ead03cce80da723a0224fb34335d1ccbe3e2ab51c6f06b48e350a6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x65, "a18b4a12b8db7ebc73a755b61687a127892efe8c6e51b252b3a0ec9a9ac6aa08e0868339a1a15ea74846b7e274c3d1327df36fb401ced9266a34ba6a99df59ddc86f332d0f5d438850782127812808898e96e2a61996b9540a9f475bc24139edbb261c8f0d"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) 16:18:29 executing program 0: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private2, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100, 0xcf4, 0x3, 0x400, 0x5a, 0x460010, r5}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000200)=""/30, &(0x7f0000000240)=0x1e) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4c}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x416}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x384}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd8}}, 0x10) mq_open(&(0x7f0000000780)='&seliW1Bg\xefT!~\x00', 0x800, 0x21, &(0x7f00000007c0)={0x8000, 0x7f, 0x10001, 0xbe1}) 16:18:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x700, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:29 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xae01, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 737.137221][T24284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 737.179810][T24289] binder: 24280:24289 ioctl c0306201 200000c0 returned -14 [ 737.199315][T24286] IPVS: ftp: loaded support on port[0] = 21 [ 737.205993][T24287] IPVS: ftp: loaded support on port[0] = 21 16:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000003f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 737.228902][T24289] binder: 24280:24289 ioctl c0306201 200000c0 returned -14 [ 737.236751][T24284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 737.248558][T21811] usbhid 3-1:0.0: can't add hid device: -71 [ 737.255078][T21811] usbhid: probe of 3-1:0.0 failed with error -71 [ 737.314652][T21811] usb 3-1: USB disconnect, device number 44 16:18:29 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 16:18:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x3f00, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 737.580468][T24338] binder: 24331:24338 ioctl c0306201 200000c0 returned -14 16:18:29 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) [ 737.634530][T24338] binder: 24331:24338 ioctl c0306201 200000c0 returned -14 16:18:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xff00, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 737.768451][T21811] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 737.849851][T24358] binder: 24356:24358 ioctl c0306201 200000c0 returned -14 [ 737.890444][T24358] binder: 24356:24358 ioctl c0306201 200000c0 returned -14 [ 738.018466][T21811] usb 3-1: Using ep0 maxpacket: 16 [ 738.051188][T24286] IPVS: ftp: loaded support on port[0] = 21 [ 738.068455][T21811] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 738.179136][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.215443][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.262229][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.389033][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.408315][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.428336][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.538942][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.550021][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.561908][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.668527][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.683655][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.694004][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.788559][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.799487][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.811101][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.918968][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.933753][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.943963][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.049785][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.060888][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.072955][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.168597][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.180570][T21811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.192075][T21811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.298683][T21811] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 739.307902][T21811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 739.316542][T21811] usb 3-1: SerialNumber: syz [ 739.324764][T21811] usb 3-1: config 0 descriptor?? [ 740.040860][T21811] hid-multitouch 0003:045E:87F5.002C: unknown main item tag 0x0 [ 740.054472][T21811] hid-multitouch 0003:045E:87F5.002C: unknown main item tag 0x0 [ 740.067337][T21811] hid-multitouch 0003:045E:87F5.002C: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 16:18:33 executing program 0: io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f00000000c0)="b900303ad4eede178021e9f38552d10fe8427ee2f70d03a08cdb211033991c2d54270d4884a66ecf18bccad33a6c043a32c8e19964d4d4d1582fe969ea5ecb4832a2774892b5a5cade26133568261e9482", 0x51, 0x1, 0x0, 0x3, r2}, &(0x7f0000000180)) mq_open(&(0x7f0000000000)='\xe9\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\xad\xf0\x05|x`W\xb4\"\x15Z\x8cH\x9fH\x7f\xf6Ja{\x90H22\xc7\xa2\xc9I\x18;,\x06\xe6D]\x9c\x9f\xc8#\x82\xf7f\x1e<$\f\\\xc6\"\xfb\xf8\x84\xd8n2&f1\x95a\x03\xc3,Q\x8a\xc3\xae\xb1\x84\xb2\xbe\xc6\xea\x9a\xfee\x94v\xb2\xcf\x06\x81\xf3\xab.$`\x93\xc7\xcd\xc2o\xbb\xb0\xb4z\xac\xe1\xb6\xc7j\xa9\x1bY\x92eV$\xaf\x96\x82J\xd3\xbe k\xabC\x92!\xd0\x86.<\xf3\x90i\xc3B\xae\xb4\x80\x10 \xeb\b\x12\x1d>4\xff', 0x800, 0x101, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0x8001}) 16:18:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x1000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xae41, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:33 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000000b000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000200)=""/176) inotify_init1(0xc0800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 741.289984][ T12] usb 3-1: USB disconnect, device number 45 [ 741.404024][T24431] binder: 24416:24431 ioctl c0306201 200000c0 returned -14 [ 741.421449][T24428] IPVS: ftp: loaded support on port[0] = 21 [ 741.432250][T24427] IPVS: ftp: loaded support on port[0] = 21 16:18:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 741.462871][T24438] binder: 24416:24438 ioctl c0306201 200000c0 returned -14 16:18:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x2000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:33 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) 16:18:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 741.770642][T24488] binder: 24484:24488 ioctl c0306201 200000c0 returned -14 16:18:33 executing program 0: mq_open(&(0x7f0000000040)='&selinuxbdev-\x00', 0x140, 0x8, &(0x7f0000000000)={0xfffffdff, 0x6599, 0x10001, 0x10000003}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @broadcast}, &(0x7f00000000c0)=0xc) sendmsg$xdp(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x2c, 0x4, r2, 0xe}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="8b8b38e37cc0fd9d78d085060ef50655b4afbe90aca75c805651525094fce1b06c7fd6fec62891a75e8ea715f9", 0x2d}, {&(0x7f0000000180)="9462d135863db8dde7bc88f1676d2fda93dbe3c2", 0x14}, {&(0x7f00000001c0)="97f470b3f6ca4f33ca906cad25041c2d7fd77f3738b2c2bd60dd824c0bfb4eca3706d716cfda678e3d9d696c928ca7d88b3a3fa1e871eeaf6e083c3ff7e2bdf3d9ddfb02138de0", 0x47}, {&(0x7f0000000240)="096a8d4a0eccdb52ac36a3c65f798432ee85051572d66557217b28820d856460d1b357cb3177d315031783828ddd10e97a182db8365999fd071db71ef4fb2f964b620506914dada4c62f1c349fbc4659855a79896b330376937dc09512ddc4e38c5c6b06758479ad00ee69259ab0181666183af9187eb006e0a57dbc8400d5176206b61135e286be9b42286357423001f03630d76cba3ac31cfb8064707a43b172d732c688d953d7ee9b90af53631e4875e2b513697432115b0ace697151aeb8eb6f13dc9c935ee49e55b9d22b9f", 0xce}, {&(0x7f0000000340)="635b7c69fc93ac2bafc4400bf185b2a9", 0x10}, {&(0x7f0000000380)="a25bdb570c576066890b136dc22a8c94bedc6b48dcc4e854d9a5ff4c070183dc823a8753a67eb29568400b81bdc397ef53fb751d3421efb52d97d2c3d876077b8e2db21ef37206aa2264dd421076f3f66f41727f7ffa4a426eaad5ad49c2300cb7d217215ef3570119dbbb06061bacef02cd2505d4d14a3c857f056865e5ebe213d7d68e6a599042eff4097217f75c62be661cd5f91cae17e8dddc29bcfbd3960c9a6a2be2b9c9f8c264057ba839e9d8861289464796d9ffd848c473b034c1c24cebcb0d83d441c9b53c6901fdb18bc2cd13588909b1465952386e83130f91", 0xdf}, {&(0x7f0000000480)="4ade2666b447909fdc39f0cfebd3d93a0c2f69a563afd8805304eda10f03d8e952e5fe7b43c021bc5d0588a74f4a7149ba69fe22503c8c9e9f753ef8b0ca4c9bc427d0ce2c5583b438db30ca5f0423192ff8069d4902c833d1782fe2c7b41cd3d3f4556cd4b2738e75540fe4715545c6348934c34c6e39600246afa2029bcffb", 0x80}], 0x7, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x7b, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e21, 0x9, @empty, 0x8}}}, &(0x7f0000000640)=0x84) [ 741.828556][T24491] binder: 24484:24491 ioctl c0306201 200000c0 returned -14 16:18:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x3000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="40bae7949dea32f1bed6bd5cb2ce11c6a9d97f35f884942c2169010000806fceb5bbf5a887fa225786b551e4afccb9f9cdc28f81204231cbc9dc6356a070a755a3884bfd875e4130786886f260ecba0249b0ada310d6f54096aee0d00721289b8ca8c0e416ca2ba9b0992584e0f0e701f483ccac29456bc51987a79f65d3bfb7b67f753817013a63aa1eca3f72d031c3"], 0x0, 0x0}, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 16:18:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 742.107440][T24501] binder: 24500:24501 ioctl c0306201 200000c0 returned -14 [ 742.157199][T24501] binder: 24500:24501 ioctl c0306201 200000c0 returned -14 [ 742.347782][T24427] IPVS: ftp: loaded support on port[0] = 21 [ 742.448413][T24412] usb 3-1: new high-speed USB device number 46 using dummy_hcd 16:18:34 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 742.698644][T24412] usb 3-1: Using ep0 maxpacket: 16 [ 742.783996][T24533] IPVS: ftp: loaded support on port[0] = 21 [ 742.819234][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.872044][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.930476][T24412] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 743.079188][T24412] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 743.099746][T24412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 743.159740][T24412] usb 3-1: SerialNumber: syz [ 743.199319][T24412] usb 3-1: config 0 descriptor?? 16:18:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x4000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xae60, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:35 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000000900)={0xbe0, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x59}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffff38}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x4, 0x80, 0xc1, 0x1}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x8, 0x2}, {0x8000, 0x3f, 0xff, 0x8001}, {0x7f, 0x3, 0x72, 0x7f}, {0x7fff, 0x81, 0x8, 0x4}, {0x9, 0x7f, 0x3, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x6, 0x80, 0x4, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xa3a4b9c}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3e8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0xbe0}, 0x1, 0x0, 0x0, 0xa000}, 0x4000080) [ 743.678557][T24412] usbhid 3-1:0.0: can't add hid device: -71 [ 743.684732][T24412] usbhid: probe of 3-1:0.0 failed with error -71 [ 743.718066][T24568] binder: 24564:24568 ioctl c0306201 200000c0 returned -14 16:18:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 743.745172][T24412] usb 3-1: USB disconnect, device number 46 [ 743.751465][T24569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 743.773714][T24568] binder: 24564:24568 ioctl c0306201 200000c0 returned -14 16:18:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x5000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 743.832206][T24574] IPVS: ftp: loaded support on port[0] = 21 [ 743.917741][T24581] IPVS: ftp: loaded support on port[0] = 21 16:18:36 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000300)) getsockname$packet(r1, 0x0, &(0x7f0000000540)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000010801010000000000000000050000050500030021000000f13afb2fb9e25dc256865b2eca30"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080a0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x84) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000c00fe070101655800000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0xbee}, {0xa, 0x4e20, 0x3f, @remote, 0x800}, 0x7, [0x14d7, 0xffff, 0x7023cb64, 0x5, 0xfff, 0x81, 0xfa7, 0x800]}, 0x5c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @multicast}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 'veth0_to_hsr\x00'}) 16:18:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 744.263694][T24619] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.318585][T24412] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 744.565110][T24412] usb 3-1: Using ep0 maxpacket: 16 [ 744.596536][T24574] IPVS: ftp: loaded support on port[0] = 21 [ 744.690450][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.721044][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.778442][T24412] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.879211][T24412] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 744.894451][T24412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 744.907399][T24412] usb 3-1: SerialNumber: syz [ 744.926265][T24412] usb 3-1: config 0 descriptor?? 16:18:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x48, @string={0x48, 0x3, "5acee2b9b8f94bc7598c526edd4a3bf5d290937ad19e69d8e0798e7238fb389c6d2b69fc9786bd9ae24caebcd17002bb265abd66976d113af824da00d09dc77b47c9bbd16145"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c2062b3f070d0000082a9000170900be0083cfe744e5bc7f6d11119d29adace62da071358016e49bdff0e089823abef2010000002fea777bd03c4d8bdf0c7fe185e722c5badf0428fb32ac50ec8228797c2e33a26adf9d4b09d7e82262c00b415091d2846e097236fe943cf8b45920b36f5f792b5302a5648a31787b176ca6ac5d95fa96e141c7add447bc"], 0x0}, 0x0) 16:18:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x6000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:37 executing program 0: mq_open(&(0x7f0000000780)='&seli`uxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x659a, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x8) 16:18:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xae80, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 745.250756][T24674] IPVS: ftp: loaded support on port[0] = 21 [ 745.251643][T24673] IPVS: ftp: loaded support on port[0] = 21 [ 745.280115][T24677] binder: 24668:24677 ioctl c0306201 200000c0 returned -14 16:18:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 745.298708][T24412] usbhid 3-1:0.0: can't add hid device: -71 [ 745.306841][T24412] usbhid: probe of 3-1:0.0 failed with error -71 16:18:37 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) connect$pptp(r1, &(0x7f0000000400)={0x18, 0x2, {0x0, @remote}}, 0x1e) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000540)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x7f) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x7fffffff, {{0xa, 0x4e20, 0x3, @remote, 0x7}}, 0x1, 0x6, [{{0xa, 0x4e20, 0x0, @loopback, 0x2}}, {{0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00', 0x7f}}, {{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x3f7f}}, {{0xa, 0x4e22, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x6, @private1, 0xdddd}}, {{0xa, 0x4e24, 0x80000001, @empty, 0x4}}]}, 0x38c) [ 745.351946][T24684] binder: 24668:24684 ioctl c0306201 200000c0 returned -14 [ 745.364473][T24412] usb 3-1: USB disconnect, device number 47 16:18:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x7000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:37 executing program 0: mq_open(&(0x7f0000000780)='\x00'/14, 0x40, 0x1c1, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/arp\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x1405, 0x100, 0x70bd29, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000440)='/dev/nvme-fabrics\x00', 0x4802, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x70, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x40, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd3, 0x4, @perf_config_ext={0x1, 0x3f}, 0x10, 0x7, 0x89c2, 0x7, 0x1, 0x4, 0x200}, r4, 0x3, 0xffffffffffffffff, 0x9) fcntl$getown(r1, 0x9) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000166d7301861ec16f416b577117384f00000000000000000000000000548a938597075d11e12a64ffd811e32a6aef0f30d26420a44ef12210de7d2fb410a528b2277135bd577eca9008be35748ef835e65b54b9664ba0057dd3795bd46176ae95e16f15c2c85749105bd502686f41f803c22c886e654cb097b9b5e5f4c5c89d0db97f34167babd7b401438e77c5cf6d6abed392e28ec774468c6f6622d7179c7ba76037b91d2d21c0e5cf9443de4daff2dfe46456b03acef8dacb0d09"], 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x80) [ 745.690034][T24731] binder: 24727:24731 ioctl c0306201 200000c0 returned -14 [ 745.742756][T24731] binder: 24727:24731 ioctl c0306201 200000c0 returned -14 16:18:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 745.788654][T24412] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 746.028478][T24412] usb 3-1: Using ep0 maxpacket: 16 [ 746.086229][T24673] IPVS: ftp: loaded support on port[0] = 21 [ 746.149072][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.175202][T24412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.205296][T24412] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.330423][T24412] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 746.351353][T24412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 746.385985][T24412] usb 3-1: SerialNumber: syz [ 746.423503][T24412] usb 3-1: config 0 descriptor?? [ 747.140791][T24412] hid-generic 0003:045E:87F5.002D: unknown main item tag 0x0 [ 747.163334][T24412] hid-generic 0003:045E:87F5.002D: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 747.346711][T24412] usb 3-1: USB disconnect, device number 48 [ 748.119152][ T12] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 748.378453][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 748.498568][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.510285][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.521886][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 748.608936][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 748.617998][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 748.627535][ T12] usb 3-1: SerialNumber: syz [ 748.636864][ T12] usb 3-1: config 0 descriptor?? 16:18:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x8000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:40 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:40 executing program 0: mq_open(&(0x7f0000000780)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f00000007c0)={0x8000, 0x6599, 0x10001, 0xbe1}) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x208080, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x89}, 0x2) 16:18:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x400454ca, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 748.678632][ T12] usb 3-1: can't set config #0, error -71 [ 748.730394][ T12] usb 3-1: USB disconnect, device number 49 16:18:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900dfd983"], 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r2) acct(&(0x7f0000000940)='./file0\x00') syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x40, 0xe, 0xd3, {0xd3, 0x22, "8219657de87df2aaac1b92e6f3dbd13b8bc5f7d550be49a7034b17f8ebd8a5cb66dee1375d8aa9082c78ee50029158c3bc0b8978956444fe7856375ed479204a3b8a183b43cfd6b5db912a6b24a99cd36dbfac73e366f231bed04fea6d3ce2c469e766da535f4de70dac32be23f20e1fec57a92cfc830d7bc87de23accacaaeaf1388943e4170660d3feb59e668fa077882b6f14c889212bd804f1efe497a7932b76369113989174333e6a1345bb4d7e5793ccc8c490d8a7f4358e353510b2d736f174cff8fed67020ca11dfb0a0733702"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x442}}, &(0x7f0000000300)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x200, 0xf00, 0x4, [0xc000, 0xc0, 0x30, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0f01ce134cbf2c74a99a0598ea86fdc3"}, @ss_container_id={0x14, 0x10, 0x4, 0x9f, "9a22093fe30cb14a63e8a70d196ded46"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x82, 0x8, 0x100}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x3f, 0x9, "994ad23d", "2cc644b4"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x3, 0x3, 0x0, 0x80, 0x8, 0x7ff}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000440)={0x20, 0x16, 0x93, "39ba822d479885ab39f7f443374fc30f24ca37329d5c79f2741418fb2f545ea0326c2fb16ed28c4899dfe1dccc11f32db73c4ed6c646c706e47396a16e85fe425abe53a2be8c940e1ac0965dad0a06dae8570627b7f89b2ffb6f2239cd9197531657e591aa5c9bd229ddf80792129576b3d9cb516161608849a87dcec1de123e6e7aeb4be74af4604c5d49de283e662616c84c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x140, 0x10, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0xb, 0x2, "cdb0"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "f361"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x380}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) [ 748.780324][T24805] binder: 24795:24805 ioctl c0306201 200000c0 returned -14 [ 748.782471][T24802] IPVS: ftp: loaded support on port[0] = 21 [ 748.796715][T24801] IPVS: ftp: loaded support on port[0] = 21 16:18:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 748.836264][T24805] binder: 24795:24805 ioctl c0306201 200000c0 returned -14 16:18:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x3f000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000004f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 749.130006][T24856] binder: 24844:24856 ioctl c0306201 200000c0 returned -14 16:18:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 749.189660][T24856] binder: 24844:24856 ioctl c0306201 200000c0 returned -14 16:18:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xfdfdffff, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 749.268697][ T12] usb 3-1: new high-speed USB device number 50 using dummy_hcd 16:18:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 749.434120][T24867] binder: 24866:24867 ioctl c0306201 200000c0 returned -14 [ 749.508502][ T12] usb 3-1: Using ep0 maxpacket: 16 16:18:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xff000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 749.629134][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.663744][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.666600][T24876] binder: 24874:24876 ioctl c0306201 200000c0 returned -14 [ 749.715961][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.732054][T24801] IPVS: ftp: loaded support on port[0] = 21 [ 749.760057][T24879] binder: 24874:24879 ioctl c0306201 200000c0 returned -14 16:18:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 749.879162][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 749.888263][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 749.953244][ T12] usb 3-1: SerialNumber: syz [ 749.994882][ T12] usb 3-1: config 0 descriptor?? [ 750.066305][T24903] IPVS: ftp: loaded support on port[0] = 21 [ 750.720790][ T12] hid-multitouch 0003:045E:87F5.002E: unknown main item tag 0x0 [ 750.744200][ T12] hid-multitouch 0003:045E:87F5.002E: item 0 4 0 8 parsing failed 16:18:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x40049409, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 750.779267][ T12] hid-multitouch: probe of 0003:045E:87F5.002E failed with error -22 [ 750.881835][T24936] IPVS: ftp: loaded support on port[0] = 21 [ 750.919219][ T144] tipc: TX() has been purged, node left! [ 750.930416][T24813] udc-core: couldn't find an available UDC or it's busy [ 750.937402][T24813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.978844][ T144] tipc: TX() has been purged, node left! [ 750.985829][ T144] tipc: TX() has been purged, node left! [ 751.005930][ T144] tipc: TX() has been purged, node left! [ 751.027484][ T144] tipc: TX() has been purged, node left! [ 751.160605][T24936] IPVS: ftp: loaded support on port[0] = 21 [ 751.186861][ T3339] usb 3-1: USB disconnect, device number 50 [ 751.208904][ T144] tipc: TX() has been purged, node left! [ 751.221336][ T144] tipc: TX() has been purged, node left! [ 751.250253][ T144] tipc: TX() has been purged, node left! [ 751.393161][ T144] tipc: TX() has been purged, node left! [ 751.578509][ T144] tipc: TX() has been purged, node left! [ 751.758696][ T144] tipc: TX() has been purged, node left! [ 751.948542][ T144] tipc: TX() has been purged, node left! [ 751.959063][ T3336] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 752.118700][ T144] tipc: TX() has been purged, node left! [ 752.218557][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 752.278605][ T144] tipc: TX() has been purged, node left! [ 752.378611][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.389685][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.399633][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r1 = semget$private(0x0, 0x2, 0x200) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000000)=0xffffffff) [ 752.468548][ T144] tipc: TX() has been purged, node left! 16:18:44 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4008ae93, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:44 executing program 0: mq_open(&(0x7f00000002c0)='\x90\xa5bB%\xeb=d\xa6\xb8\xc9\x8c\x17\xdf,\x92\x7f\xa3\xbb\xfcZ\xa28\x84HY\x96\xa37\x13fB\xa6%\xb8X\xbe\xc5W~\xdaJO\xac=\xd8e2_\xb1H\xca}\x03\xd4\x15Vo\xfe\xfaZ_9\xcf\xfa\xfcE\xa0f', 0x40, 0x0, &(0x7f00000007c0)={0x8002, 0x659c, 0x10001, 0xbe1}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = fcntl$dupfd(r0, 0x406, r1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/29, 0x1d, 0x10100, 0x0, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x52181, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r4, 0xf06, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x10}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x41) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x75, "bd070a934fd229d5ef0a5d0454d2b1ab22746c683984fccd75b9f98d01e7044e02efc704a5df3893c1d4fcaead231a8bd745a5b4824a4207360ae8eeb40fe6592123d431779f392fa4bc32dcf72148a54d69d7b0ecd4e29a2d19df2fdf3a246568a10150c59fbd5ba625246937b592e5f3037b1011"}, &(0x7f0000000280)=0x99) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x220140, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0)='gtp\x00') r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="340227bd7040ffdbdf250200000006000600000000000600060001000000080007002969e60d5f5a32503ca5e2093d19e2895ba2bc5d6001648e345b1f14331fbba903334f3707c1b5525d7186e4cde5047fceea514e94717f6515ff2398b3a9fb8391", @ANYRES32=r7, @ANYBLOB="0800090004000000080009000100"], 0x5}, 0x1, 0x0, 0x0, 0x49085}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24044801) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x401, 0x4) 16:18:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xfffffdfd, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:44 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 752.518654][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 752.527742][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 752.577291][T25000] binder: 24994:25000 ioctl c0306201 200000c0 returned -14 [ 752.592067][T24998] IPVS: ftp: loaded support on port[0] = 21 [ 752.602605][ T3336] usb 3-1: config 0 descriptor?? [ 752.619498][T25001] IPVS: ftp: loaded support on port[0] = 21 16:18:44 executing program 0: mq_open(&(0x7f0000000000)='&selinuxbdev-\x00', 0x40, 0x0, &(0x7f0000000040)={0x8000, 0x6599, 0xfffe, 0xbe1}) [ 752.638506][ T144] tipc: TX() has been purged, node left! [ 752.649922][ T3336] usb 3-1: can't set config #0, error -71 16:18:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x100000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 752.712707][ T3336] usb 3-1: USB disconnect, device number 51 [ 752.741612][ T144] tipc: TX() has been purged, node left! [ 752.747987][ T144] tipc: TX() has been purged, node left! [ 752.792136][ T144] tipc: TX() has been purged, node left! [ 752.822769][ T144] tipc: TX() has been purged, node left! [ 752.859548][ T144] tipc: TX() has been purged, node left! 16:18:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 752.913659][ T144] tipc: TX() has been purged, node left! [ 752.933246][T25050] binder: 25043:25050 ioctl c0306201 200000c0 returned -14 [ 752.955533][ T144] tipc: TX() has been purged, node left! [ 753.017248][T25060] binder: 25043:25060 ioctl c0306201 200000c0 returned -14 16:18:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xae80, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 753.098592][ T3336] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 753.188579][ T144] tipc: TX() has been purged, node left! [ 753.206330][T25067] IPVS: ftp: loaded support on port[0] = 21 [ 753.252569][T24998] IPVS: ftp: loaded support on port[0] = 21 [ 753.274193][ T144] tipc: TX() has been purged, node left! [ 753.284876][ T144] tipc: TX() has been purged, node left! [ 753.321356][ T144] tipc: TX() has been purged, node left! [ 753.353488][ T144] tipc: TX() has been purged, node left! [ 753.368946][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 753.398950][ T144] tipc: TX() has been purged, node left! [ 753.460411][ T144] tipc: TX() has been purged, node left! [ 753.466774][ T144] tipc: TX() has been purged, node left! [ 753.498978][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.535549][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.581690][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.693512][ T144] tipc: TX() has been purged, node left! [ 753.699700][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 753.726996][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 753.744899][ T3336] usb 3-1: SerialNumber: syz [ 753.752364][ T3336] usb 3-1: config 0 descriptor?? [ 753.858547][ T144] tipc: TX() has been purged, node left! [ 754.018543][ T144] tipc: TX() has been purged, node left! [ 754.198531][ T144] tipc: TX() has been purged, node left! [ 754.358614][ T144] tipc: TX() has been purged, node left! [ 754.451182][ T3336] hid-multitouch 0003:045E:87F5.002F: unknown main item tag 0x0 [ 754.459151][ T3336] hid-multitouch 0003:045E:87F5.002F: unknown main item tag 0x0 [ 754.468044][ T3336] hid-multitouch 0003:045E:87F5.002F: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 754.588631][ T144] tipc: TX() has been purged, node left! [ 754.597234][ T144] tipc: TX() has been purged, node left! [ 754.655663][ T3339] usb 3-1: USB disconnect, device number 52 [ 754.768584][ T144] tipc: TX() has been purged, node left! [ 754.908563][ T144] tipc: TX() has been purged, node left! [ 755.038639][ T144] tipc: TX() has been purged, node left! [ 755.044713][ T144] tipc: TX() has been purged, node left! [ 755.053979][ T144] tipc: TX() has been purged, node left! [ 755.063606][ T144] tipc: TX() has been purged, node left! [ 755.071080][ T144] tipc: TX() has been purged, node left! [ 755.077031][ T144] tipc: TX() has been purged, node left! [ 755.248668][ T144] tipc: TX() has been purged, node left! [ 755.428547][ T9670] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 755.469489][ T144] tipc: TX() has been purged, node left! [ 755.689411][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 755.769454][ T144] tipc: TX() has been purged, node left! [ 755.809229][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.820272][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.830572][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.919186][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 755.928344][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 755.936820][ T144] tipc: TX() has been purged, node left! [ 755.944675][ T9670] usb 3-1: SerialNumber: syz [ 755.960263][ T9670] usb 3-1: config 0 descriptor?? 16:18:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00af6d8748d628f298852d957ad0cc9672ba74d6a088d3855b20f7116c940ffdab2661c2ca7402a92bf822a8302b6b16c09f019b86c65926409e3bcd11e4f0ad863d04ba60766df89085773b7a835a7c50873c06c314befea05488c51d74e4820b9f3b872f4b11adeec8fcadac179a77e1ffab7053ce044fe20fc994011bd6db28d7324d32e11d75f96464c71b4bfde39057080eba88e6dcf43c"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x10000, 0x1}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) [ 756.007962][ T9670] usb 3-1: can't set config #0, error -71 [ 756.040048][ T9670] usb 3-1: USB disconnect, device number 53 [ 756.136134][ T144] tipc: TX() has been purged, node left! [ 756.268528][ T144] tipc: TX() has been purged, node left! 16:18:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x40186366, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x200000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:48 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 756.367166][T25161] IPVS: ftp: loaded support on port[0] = 21 [ 756.388262][T25164] IPVS: ftp: loaded support on port[0] = 21 [ 756.389243][T25163] binder: 25157:25163 ioctl c0306201 200000c0 returned -14 [ 756.428951][ T144] tipc: TX() has been purged, node left! [ 756.442799][ T144] tipc: TX() has been purged, node left! 16:18:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 756.469810][ T144] tipc: TX() has been purged, node left! [ 756.484906][T25173] binder: 25157:25173 ioctl c0306201 200000c0 returned -14 [ 756.508911][ T9670] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 756.511260][T25176] IPVS: ftp: loaded support on port[0] = 21 16:18:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x300000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 756.568810][ T144] tipc: TX() has been purged, node left! [ 756.577241][ T144] tipc: TX() has been purged, node left! [ 756.629858][ T144] tipc: TX() has been purged, node left! 16:18:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 756.748585][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 756.781779][T25225] binder: 25222:25225 ioctl c0306201 200000c0 returned -14 [ 756.837410][T25238] binder: 25222:25238 ioctl c0306201 200000c0 returned -14 16:18:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 756.878673][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.917738][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 16:18:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x400000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 756.963084][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 757.089193][T25246] binder: 25244:25246 ioctl c0306201 200000c0 returned -14 [ 757.128728][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 757.168291][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 757.182028][T25246] binder: 25244:25246 ioctl c0306201 200000c0 returned -14 [ 757.219836][ T9670] usb 3-1: SerialNumber: syz [ 757.257499][ T9670] usb 3-1: config 0 descriptor?? [ 757.365722][T25176] IPVS: ftp: loaded support on port[0] = 21 [ 757.547260][T25151] vivid-005: disconnect [ 757.570640][T25148] vivid-005: reconnect [ 757.718642][ T9670] usbhid 3-1:0.0: can't add hid device: -71 [ 757.724774][ T9670] usbhid: probe of 3-1:0.0 failed with error -71 [ 757.748356][ T9670] usb 3-1: USB disconnect, device number 54 [ 758.348619][ T2706] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 758.608614][ T2706] usb 3-1: Using ep0 maxpacket: 16 [ 758.749660][ T2706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.761511][ T2706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.771861][ T2706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 758.858706][ T2706] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 758.868012][ T2706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 758.877874][ T2706] usb 3-1: SerialNumber: syz [ 758.887314][ T2706] usb 3-1: config 0 descriptor?? 16:18:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfc53, 0x40) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 16:18:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x500000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:51 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4020940d, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 759.147547][T25296] IPVS: ftp: loaded support on port[0] = 21 [ 759.169813][T25299] binder: 25292:25299 ioctl c0306201 200000c0 returned -14 [ 759.180922][T25297] IPVS: ftp: loaded support on port[0] = 21 [ 759.182107][T25298] IPVS: ftp: loaded support on port[0] = 21 16:18:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 759.218688][ T2706] usbhid 3-1:0.0: can't add hid device: -71 [ 759.227150][ T2706] usbhid: probe of 3-1:0.0 failed with error -71 [ 759.256962][T25299] binder: 25292:25299 ioctl c0306201 200000c0 returned -14 [ 759.290877][ T2706] usb 3-1: USB disconnect, device number 55 16:18:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x600000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 759.605785][T25359] binder: 25358:25359 ioctl c0306201 200000c0 returned -14 [ 759.658318][T25359] binder: 25358:25359 ioctl c0306201 200000c0 returned -14 [ 759.678762][ T2706] usb 3-1: new high-speed USB device number 56 using dummy_hcd 16:18:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x700000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 759.837658][T25298] IPVS: ftp: loaded support on port[0] = 21 [ 759.888133][T25386] binder: 25384:25386 ioctl c0306201 200000c0 returned -14 [ 759.928831][ T2706] usb 3-1: Using ep0 maxpacket: 16 [ 759.950050][T25386] binder: 25384:25386 ioctl c0306201 200000c0 returned -14 [ 760.049502][ T2706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.081642][ T2706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.126891][ T2706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.257715][ T2706] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 760.280977][ T2706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 760.301702][ T2706] usb 3-1: SerialNumber: syz [ 760.317247][ T2706] usb 3-1: config 0 descriptor?? [ 761.021133][ T2706] hid-multitouch 0003:045E:87F5.0030: unknown main item tag 0x0 [ 761.029949][ T2706] hid-multitouch 0003:045E:87F5.0030: unknown main item tag 0x0 [ 761.039761][ T2706] hid-multitouch 0003:045E:87F5.0030: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 761.227145][ T9666] usb 3-1: USB disconnect, device number 56 [ 761.998630][ T3336] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 762.249602][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 762.379103][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.393241][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.406748][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:18:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x1406, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) syz_usb_ep_write(r0, 0x4, 0xf2, &(0x7f0000000200)="a2efea2d6e34566181fa8171f4ad0fab09a025dcea42ce70b507f5e2dbf245c5dc44ae6a26dae278d7e1dbb7329da14ddcc8e39dee7214da7ebf5eb0f8d42f40f99931576585793aae517fb3916937f72b1af20bdaa6651a886403a8cd5af620a555597029050a287d98c0f8405cd10b648587114b9c635daa00dab8a875dd255e79a63e1c1e150447218fa2b4ab3be9637f0d84ddc1f8a00f0a769c290c7b3de0b7cb2947d1d701810da1f95bd6cf9425835b65cb6113f0b4fa851f94727591dcaf20a25d831328ae1a714032770bac87865c4c286112840d3e32a5ba329702aecd5f4fb750a2a10369cc33592cc6a3fc10") r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xedd3, 0x4) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0x13, [{{0x9, 0x4, 0x0, 0x3f, 0x1, 0x3, 0x1, 0x1, 0x1f, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0xb66}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe0, 0x3f, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xff, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x40, 0x40, 0x59, 0x40, 0xe}, 0x129, &(0x7f0000000340)={0x5, 0xf, 0x129, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6}, @generic={0xf4, 0x10, 0xb, "cdb3a7ac902a074fe5c0a6fc13ca792cb057a040b242e6eb73da46127d886b20ff7942c162b97b1a5f43f77d67348a3bdd08848d39a58026f3f8c2dda11a237db5a34ec46c7c7c18a2128901d68c6b74fdafbc5eb52c4682b60d8736f91b2b085e7b92e4f8d01b8cadb732466b862b93253b452dcc5a68d66a2536238e6685fed28f3a7dffd47b9f6de24a9838f09063c1e35dca61c609d3d237008316ae6cb1a7d8c226e378a0cc88a5022b32053cf415a47bed5dc4799b285dd63aa2ac340209489eb9fe040649005013afe6aede37d7bd71932c08dbdd76de845c4f65b7e3399bcf6191ffc5936529326e48be43900a"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x7, 0x1e00f, 0x0, [0x3fc0, 0xc000, 0xff3f30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x20, 0x8, 0x9, 0x3}]}, 0x4, [{0xf1, &(0x7f0000000480)=@string={0xf1, 0x3, "c2bf275b36c619cf10d726edcd61a4be019de01803451be9bac6cc3bef4169175758a93501a26643bb0485beed8c7ff093c85dc2485e749cf4a31bc793518b4cf141f7420458df38447d3b4a3f22e4e2a91ba7237b2a25c9badc114827b1c2394a460cca355354253a0d76b188e31a838e52a1ec21ad06e2b2e0175459ec697ef5c24431bb66e1d4207586d6d014f9dc2db1b8b263d9b8a74beebbd89bd55692fed3a0b1bac70579f822ce7b5dc93fec9e905ee29af757a4fb6acab466d6975db2f3f2beb70b74c23d0f258be8e3fa4f17b3497bb58c9415268260af47feb20bd650e67053b2f8bd68844cc1de6431"}}, {0xa1, &(0x7f0000000580)=@string={0xa1, 0x3, "8ff0cbbb00946ec109faa39a8aaf390121ed7737cbe5d88d6acef46d042af4b29713ce9e5d4a7ca714c059679ca3b80495b9e869ae264348549154f3192ee514aafe5223a27130cc40a39907278ce488cba7d90680ed7436544109bd935dc722d62993256511d8a421aa481b0637812c214db96046bab08ce895930dd282379c2df636b1f09bd37f855a1a1b06a4000e9ec886c9099659b721e1926caa28c7"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2802}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000100)=ANY=[], 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x1) 16:18:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 762.498855][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 762.507965][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 762.517142][ T3336] usb 3-1: SerialNumber: syz [ 762.527714][ T3336] usb 3-1: config 0 descriptor?? 16:18:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4020ae46, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x800000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000005d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 762.570485][ T3336] usb 3-1: can't set config #0, error -71 [ 762.624412][ T3336] usb 3-1: USB disconnect, device number 57 [ 762.626975][T25442] binder: 25437:25442 ioctl c0306201 200000c0 returned -14 [ 762.656736][T25445] IPVS: ftp: loaded support on port[0] = 21 [ 762.667436][T25444] IPVS: ftp: loaded support on port[0] = 21 [ 762.689846][T25442] binder: 25437:25442 ioctl c0306201 200000c0 returned -14 16:18:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00af6d8748d628f298852d957ad0cc9672ba74d6a088d3855b20f7116c940ffdab2661c2ca7402a92bf822a8302b6b16c09f019b86c65926409e3bcd11e4f0ad863d04ba60766df89085773b7a835a7c50873c06c314befea05488c51d74e4820b9f3b872f4b11adeec8fcadac179a77e1ffab7053ce044fe20fc994011bd6db28d7324d32e11d75f96464c71b4bfde39057080eba88e6dcf43c"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x10000, 0x1}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) 16:18:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x3f00000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 762.877408][T25473] binder: 25471:25473 ioctl c0306201 200000c0 returned -14 16:18:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 762.923357][T25473] binder: 25471:25473 ioctl c0306201 200000c0 returned -14 16:18:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xfdfdffff00000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 763.095645][T25508] binder: 25507:25508 ioctl c0306201 200000c0 returned -14 [ 763.144614][T25508] binder: 25507:25508 ioctl c0306201 200000c0 returned -14 [ 763.158677][ T3336] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 763.168847][T21809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 763.406869][T25444] IPVS: ftp: loaded support on port[0] = 21 [ 763.418671][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 763.438715][T21809] usb 1-1: Using ep0 maxpacket: 16 [ 763.539374][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.559104][T21809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.566517][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.599096][T21809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.623163][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 763.655558][T21809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 763.739338][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 763.748471][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 763.758926][T21809] usb 1-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 763.764170][ T3336] usb 3-1: SerialNumber: syz [ 763.775263][T21809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 763.788928][ T3336] usb 3-1: config 0 descriptor?? [ 763.807325][T21809] usb 1-1: SerialNumber: syz [ 763.817318][T21809] usb 1-1: config 0 descriptor?? 16:18:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0xff00000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:56 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x402c5828, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 764.085907][T25551] binder: 25549:25551 ioctl c0306201 200000c0 returned -14 [ 764.114315][T25552] IPVS: ftp: loaded support on port[0] = 21 [ 764.135810][T25477] vivid-001: disconnect [ 764.153382][T25551] binder: 25549:25551 ioctl c0306201 200000c0 returned -14 [ 764.170601][T25555] IPVS: ftp: loaded support on port[0] = 21 [ 764.188755][ T3336] usbhid 3-1:0.0: can't add hid device: -71 [ 764.195128][ T3336] usbhid: probe of 3-1:0.0 failed with error -71 [ 764.203208][T25472] vivid-001: reconnect 16:18:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 764.250710][ T3336] usb 3-1: USB disconnect, device number 58 16:18:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x2, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 764.338691][T21809] usbhid 1-1:0.0: can't add hid device: -71 [ 764.346061][T21809] usbhid: probe of 1-1:0.0 failed with error -71 [ 764.418931][T21809] usb 1-1: USB disconnect, device number 8 16:18:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12020000000000ef5d04f587000000001e010902240001000000000904c13cc299000500092100000001222200090581033da9f6d11760319216d54a11a06151e25e88847947d0868eb43586f14be13a7676cf84f69a2458ec279bca1446d803cb51f03ae06bf5b9fb9cd5d3a3ba688fb1ba6318356725a715589fd8ce53f17849c9cf11"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=0x60) fsetxattr$system_posix_acl(r2, &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x4}], {}, {0x20, 0x3}}, 0x6c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e24, @empty}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYRES64=0x0, @ANYRES16=r0], 0x0}, 0x0) 16:18:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x800000000000000, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x3, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 764.854035][T25555] IPVS: ftp: loaded support on port[0] = 21 [ 764.890026][ T3336] usb 3-1: new high-speed USB device number 59 using dummy_hcd 16:18:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 765.023190][T25636] binder: 25632:25636 ioctl c0306201 200000c0 returned -14 16:18:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8919, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x4, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 765.158872][ T3336] usb 3-1: device descriptor read/64, error 18 16:18:57 executing program 1: unshare(0x40000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 765.214262][T25656] IPVS: ftp: loaded support on port[0] = 21 [ 765.401270][T25673] IPVS: ftp: loaded support on port[0] = 21 [ 765.558630][ T3336] usb 3-1: device descriptor read/64, error 18 [ 765.828836][ T3336] usb 3-1: new high-speed USB device number 60 using dummy_hcd 16:18:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x402c5829, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x5, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 766.010171][T25716] IPVS: ftp: loaded support on port[0] = 21 [ 766.108740][ T3336] usb 3-1: device descriptor read/64, error 18 [ 766.278432][T25716] IPVS: ftp: loaded support on port[0] = 21 [ 766.498899][ T3336] usb 3-1: device descriptor read/64, error 18 [ 766.628859][ T3336] usb usb3-port1: attempt power cycle [ 767.338655][ T3336] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 767.509132][ T3336] usb 3-1: device descriptor read/8, error -61 16:18:59 executing program 2: set_tid_address(&(0x7f0000000000)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e0465a5010000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:18:59 executing program 1: unshare(0x40000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x6, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8917, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:18:59 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x402c582a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 767.636350][T25769] IPVS: ftp: loaded support on port[0] = 21 [ 767.645902][T25770] IPVS: ftp: loaded support on port[0] = 21 [ 767.659833][T25771] IPVS: ftp: loaded support on port[0] = 21 16:18:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 767.718800][ T3336] usb 3-1: device descriptor read/8, error -71 16:18:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x7, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:18:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:18:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x8, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x300, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 768.208674][ T3336] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 768.308759][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 768.429374][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.447714][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.471250][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.589127][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=a565, bcdDevice= 0.01 [ 768.598316][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 768.627495][T25804] IPVS: ftp: loaded support on port[0] = 21 [ 768.628687][ T3336] usb 3-1: SerialNumber: syz [ 768.647721][ T3336] usb 3-1: config 0 descriptor?? [ 769.361195][ T3336] hid-multitouch 0003:045E:A565.0031: unknown main item tag 0x0 [ 769.375325][ T3336] hid-multitouch 0003:045E:A565.0031: unknown main item tag 0x0 [ 769.400456][ T3336] hid-multitouch 0003:045E:A565.0031: hidraw0: USB HID v0.00 Device [HID 045e:a565] on usb-dummy_hcd.2-1/input0 [ 769.563136][ T3339] usb 3-1: USB disconnect, device number 62 [ 770.338794][ T3339] usb 3-1: new high-speed USB device number 63 using dummy_hcd 16:19:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x500, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:02 executing program 1: unshare(0x40000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000006f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 770.565022][T25911] IPVS: ftp: loaded support on port[0] = 21 16:19:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8917, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 773.206543][T25947] IPVS: ftp: loaded support on port[0] = 21 16:19:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x402c582b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x600, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:05 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007100000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x220140, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0)='gtp\x00') r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x250, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xccc}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000840}, 0x50) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="340227bd7040ffdbdf250200000006000600000000000600060001000000080007002969e60d5f5a32503ca5e2093d19e2895ba2bc5d6001648e345b1f14331fbba903334f3707c1b5525d7186e4cde5047fceea514e94717f6515ff2398b3a9fb8391", @ANYRES32=r6, @ANYBLOB="0800090004000000080009000100"], 0x5}, 0x1, 0x0, 0x0, 0x49085}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080028bd7000fedbdf250000000008000100", @ANYRES32=r9, @ANYBLOB="08000b000300000008000900030000000600060004000000"], 0x34}}, 0x40004) 16:19:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x700, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007200000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 773.601680][T25979] IPVS: ftp: loaded support on port[0] = 21 16:19:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007300000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x3f00, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:05 executing program 0: unshare(0x40000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 773.818733][ T3336] usb 3-1: new high-speed USB device number 64 using dummy_hcd 16:19:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007400000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 773.992247][T26014] IPVS: ftp: loaded support on port[0] = 21 16:19:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xff00, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 774.058685][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 774.179509][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.211548][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.255784][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.366582][T25979] IPVS: ftp: loaded support on port[0] = 21 [ 774.379382][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 774.395315][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 774.429896][ T3336] usb 3-1: SerialNumber: syz [ 774.457589][ T3336] usb 3-1: config 0 descriptor?? 16:19:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x402c5839, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x1000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007500000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:06 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 774.870065][T26079] IPVS: ftp: loaded support on port[0] = 21 [ 775.171027][ T3336] hid-multitouch 0003:045E:87F5.0032: unknown main item tag 0x0 [ 775.184118][ T3336] hid-multitouch 0003:045E:87F5.0032: unknown main item tag 0x0 [ 775.217647][ T3336] hid-multitouch 0003:045E:87F5.0032: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 775.264323][T26079] IPVS: ftp: loaded support on port[0] = 21 [ 775.399374][ T9666] usb 3-1: USB disconnect, device number 64 [ 776.208857][ T3339] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 776.458716][ T3339] usb 3-1: Using ep0 maxpacket: 16 [ 776.599226][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.610559][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.621833][ T3339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:19:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007600000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0x80086301, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x2000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:08 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4040534e, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 776.758797][ T3339] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 776.785038][ T3339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 776.824160][T26151] binder: 26144:26151 ioctl 80086301 200000c0 returned -22 [ 776.844960][ T3339] usb 3-1: config 0 descriptor?? [ 776.863508][T26152] IPVS: ftp: loaded support on port[0] = 21 16:19:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007700000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x3000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 776.900804][ T3339] usb 3-1: can't set config #0, error -71 16:19:08 executing program 0 (fault-call:3 fault-nth:0): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 776.969180][ T3339] usb 3-1: USB disconnect, device number 65 16:19:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007800000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 777.109797][T26171] FAULT_INJECTION: forcing a failure. [ 777.109797][T26171] name failslab, interval 1, probability 0, space 0, times 0 [ 777.177018][T26171] CPU: 0 PID: 26171 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 777.185744][T26171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.195807][T26171] Call Trace: [ 777.199116][T26171] dump_stack+0x188/0x20d [ 777.203466][T26171] should_fail.cold+0x5/0xa [ 777.207988][T26171] ? lock_downgrade+0x840/0x840 [ 777.212857][T26171] ? fault_create_debugfs_attr+0x140/0x140 [ 777.218686][T26171] should_failslab+0x5/0xf [ 777.223115][T26171] kmem_cache_alloc_node+0x25c/0x760 [ 777.228420][T26171] __alloc_skb+0xba/0x5a0 [ 777.232766][T26171] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 777.238324][T26171] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 777.243882][T26171] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 777.249879][T26171] alloc_skb_with_frags+0x92/0x560 [ 777.255087][T26171] ? xfrm_policy_lookup_bytype+0x3d0/0xfa0 [ 777.260910][T26171] sock_alloc_send_pskb+0x734/0x890 [ 777.266137][T26171] ? rcu_read_lock_held_common+0x130/0x130 [ 777.271975][T26171] ? sock_wmalloc+0x120/0x120 [ 777.276762][T26171] ? xfrm_policy_lookup_bytype+0x3fc/0xfa0 [ 777.282614][T26171] __ip_append_data.isra.0+0x1687/0x3280 [ 777.288277][T26171] ? ip_reply_glue_bits+0xb0/0xb0 [ 777.293333][T26171] ? ip_mc_finish_output+0x480/0x480 [ 777.298633][T26171] ? ipv4_mtu+0x29e/0x3f0 [ 777.303000][T26171] ip_make_skb+0x228/0x2a0 [ 777.307438][T26171] ? ip_reply_glue_bits+0xb0/0xb0 [ 777.312492][T26171] ? ip_flush_pending_frames+0x20/0x20 [ 777.317970][T26171] ? lock_downgrade+0x840/0x840 [ 777.322846][T26171] ? xfrm_lookup_route+0x65/0x1e0 [ 777.327898][T26171] udp_sendmsg+0x1e5b/0x2820 [ 777.332516][T26171] ? ip_reply_glue_bits+0xb0/0xb0 [ 777.337564][T26171] ? udp_unicast_rcv_skb.isra.0+0x350/0x350 [ 777.343470][T26171] ? __lock_acquire+0x2184/0x4c50 [ 777.348525][T26171] ? ima_match_policy+0x92d/0x13d0 [ 777.353702][T26171] ? mark_held_locks+0xe0/0xe0 [ 777.358505][T26171] ? save_stack+0x32/0x40 [ 777.363033][T26171] ? do_sys_openat2+0x585/0x7d0 [ 777.367908][T26171] ? lock_acquire+0x1f2/0x8f0 [ 777.372589][T26171] ? mark_lock+0x12b/0xf10 [ 777.377087][T26171] ? udpv6_sendmsg+0x14d6/0x2b50 [ 777.382035][T26171] udpv6_sendmsg+0x14d6/0x2b50 [ 777.386802][T26171] ? __lock_acquire+0x2184/0x4c50 [ 777.391834][T26171] ? udp_v6_get_port+0x690/0x690 [ 777.396778][T26171] ? __lock_acquire+0x2184/0x4c50 [ 777.401810][T26171] ? find_held_lock+0x2d/0x110 [ 777.406568][T26171] ? __might_fault+0x11f/0x1d0 [ 777.411342][T26171] ? aa_label_sk_perm+0x89/0xe0 [ 777.416207][T26171] ? aa_sk_perm+0x319/0xab0 [ 777.420772][T26171] ? compat_rw_copy_check_uvector+0x36b/0x4a0 [ 777.426847][T26171] ? aa_af_perm+0x260/0x260 [ 777.431362][T26171] ? inet6_sendmsg+0x99/0xe0 [ 777.435957][T26171] inet6_sendmsg+0x99/0xe0 [ 777.440381][T26171] ? inet6_ioctl+0x1b0/0x1b0 [ 777.444978][T26171] sock_sendmsg+0xcf/0x120 [ 777.449404][T26171] ____sys_sendmsg+0x308/0x7e0 [ 777.454179][T26171] ? get_compat_msghdr+0xd1/0x120 [ 777.459209][T26171] ? kernel_sendmsg+0x50/0x50 [ 777.463891][T26171] ? mark_lock+0x12b/0xf10 [ 777.468323][T26171] ___sys_sendmsg+0x100/0x170 [ 777.472999][T26171] ? sendmsg_copy_msghdr+0x70/0x70 [ 777.478124][T26171] ? rcu_read_lock_held_common+0x130/0x130 [ 777.483932][T26171] ? __fget_files+0x32f/0x500 [ 777.488619][T26171] ? ksys_dup3+0x3c0/0x3c0 [ 777.493047][T26171] ? __fget_light+0x20e/0x270 [ 777.497730][T26171] __sys_sendmmsg+0x296/0x480 [ 777.502419][T26171] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 777.507458][T26171] ? lock_downgrade+0x840/0x840 [ 777.512352][T26171] ? __mutex_unlock_slowpath+0xe2/0x660 [ 777.518864][T26171] ? wait_for_completion+0x270/0x270 [ 777.524154][T26171] ? __this_cpu_preempt_check+0x28/0x190 [ 777.529789][T26171] ? __sb_end_write+0x101/0x1d0 [ 777.534648][T26171] ? vfs_write+0x161/0x5d0 [ 777.539083][T26171] ? fput_many+0x2f/0x1a0 [ 777.543427][T26171] ? ksys_write+0x1a5/0x250 [ 777.547937][T26171] ? __ia32_sys_read+0xb0/0xb0 [ 777.552716][T26171] __ia32_compat_sys_sendmmsg+0x9b/0x100 [ 777.558366][T26171] ? lockdep_hardirqs_on+0x463/0x620 [ 777.563672][T26171] do_fast_syscall_32+0x270/0xe90 [ 777.568706][T26171] entry_SYSENTER_compat+0x70/0x7f 16:19:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x4000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:09 executing program 0 (fault-call:3 fault-nth:1): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x5000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007900000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 777.863116][T26197] FAULT_INJECTION: forcing a failure. [ 777.863116][T26197] name failslab, interval 1, probability 0, space 0, times 0 16:19:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x6000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 777.926059][T26197] CPU: 0 PID: 26197 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 777.934820][T26197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.944894][T26197] Call Trace: [ 777.948208][T26197] dump_stack+0x188/0x20d [ 777.952594][T26197] should_fail.cold+0x5/0xa [ 777.957123][T26197] ? lock_downgrade+0x840/0x840 [ 777.961995][T26197] ? fault_create_debugfs_attr+0x140/0x140 [ 777.967826][T26197] should_failslab+0x5/0xf [ 777.972260][T26197] kmem_cache_alloc_node_trace+0x27c/0x790 [ 777.978096][T26197] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 777.984109][T26197] __kmalloc_node_track_caller+0x38/0x60 [ 777.989764][T26197] __kmalloc_reserve.isra.0+0x39/0xe0 [ 777.995183][T26197] __alloc_skb+0xef/0x5a0 [ 777.999529][T26197] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 778.005088][T26197] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 778.010647][T26197] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 778.016644][T26197] alloc_skb_with_frags+0x92/0x560 [ 778.021771][T26197] ? xfrm_policy_lookup_bytype+0x3d0/0xfa0 [ 778.027597][T26197] sock_alloc_send_pskb+0x734/0x890 [ 778.032812][T26197] ? rcu_read_lock_held_common+0x130/0x130 [ 778.038635][T26197] ? sock_wmalloc+0x120/0x120 [ 778.043327][T26197] ? xfrm_policy_lookup_bytype+0x3fc/0xfa0 [ 778.049157][T26197] __ip_append_data.isra.0+0x1687/0x3280 [ 778.054807][T26197] ? ip_reply_glue_bits+0xb0/0xb0 [ 778.059849][T26197] ? ip_mc_finish_output+0x480/0x480 [ 778.065169][T26197] ? ipv4_mtu+0x29e/0x3f0 [ 778.069514][T26197] ip_make_skb+0x228/0x2a0 16:19:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x7000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 778.073946][T26197] ? ip_reply_glue_bits+0xb0/0xb0 [ 778.078982][T26197] ? ip_flush_pending_frames+0x20/0x20 [ 778.084462][T26197] ? lock_downgrade+0x840/0x840 [ 778.089342][T26197] ? xfrm_lookup_route+0x65/0x1e0 [ 778.094379][T26197] udp_sendmsg+0x1e5b/0x2820 [ 778.098996][T26197] ? ip_reply_glue_bits+0xb0/0xb0 [ 778.104034][T26197] ? udp_unicast_rcv_skb.isra.0+0x350/0x350 [ 778.109938][T26197] ? __lock_acquire+0x2184/0x4c50 [ 778.114981][T26197] ? ima_match_policy+0x92d/0x13d0 [ 778.120475][T26197] ? mark_held_locks+0xe0/0xe0 [ 778.125260][T26197] ? save_stack+0x32/0x40 [ 778.129617][T26197] ? do_sys_openat2+0x585/0x7d0 [ 778.134484][T26197] ? lock_acquire+0x1f2/0x8f0 [ 778.139449][T26197] ? mark_lock+0x12b/0xf10 [ 778.143911][T26197] ? udpv6_sendmsg+0x14d6/0x2b50 [ 778.148870][T26197] udpv6_sendmsg+0x14d6/0x2b50 [ 778.153657][T26197] ? __lock_acquire+0x2184/0x4c50 [ 778.158711][T26197] ? udp_v6_get_port+0x690/0x690 [ 778.163681][T26197] ? __lock_acquire+0x2184/0x4c50 [ 778.168744][T26197] ? find_held_lock+0x2d/0x110 [ 778.173542][T26197] ? __might_fault+0x11f/0x1d0 [ 778.178330][T26197] ? aa_label_sk_perm+0x89/0xe0 [ 778.183212][T26197] ? aa_sk_perm+0x319/0xab0 [ 778.187747][T26197] ? compat_rw_copy_check_uvector+0x36b/0x4a0 [ 778.193831][T26197] ? aa_af_perm+0x260/0x260 [ 778.198357][T26197] ? inet6_sendmsg+0x99/0xe0 [ 778.202957][T26197] inet6_sendmsg+0x99/0xe0 [ 778.207389][T26197] ? inet6_ioctl+0x1b0/0x1b0 [ 778.212094][T26197] sock_sendmsg+0xcf/0x120 [ 778.216525][T26197] ____sys_sendmsg+0x308/0x7e0 [ 778.221325][T26197] ? get_compat_msghdr+0xd1/0x120 16:19:10 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 778.226362][T26197] ? kernel_sendmsg+0x50/0x50 [ 778.231050][T26197] ? mark_lock+0x12b/0xf10 [ 778.235486][T26197] ___sys_sendmsg+0x100/0x170 [ 778.240182][T26197] ? sendmsg_copy_msghdr+0x70/0x70 [ 778.245303][T26197] ? rcu_read_lock_held_common+0x130/0x130 [ 778.251148][T26197] ? __fget_files+0x32f/0x500 [ 778.255841][T26197] ? ksys_dup3+0x3c0/0x3c0 [ 778.260275][T26197] ? __fget_light+0x20e/0x270 [ 778.265143][T26197] __sys_sendmmsg+0x296/0x480 [ 778.269835][T26197] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 778.274876][T26197] ? lock_downgrade+0x840/0x840 [ 778.279758][T26197] ? __mutex_unlock_slowpath+0xe2/0x660 [ 778.285343][T26197] ? wait_for_completion+0x270/0x270 [ 778.290659][T26197] ? __this_cpu_preempt_check+0x28/0x190 [ 778.296308][T26197] ? __sb_end_write+0x101/0x1d0 [ 778.301175][T26197] ? vfs_write+0x161/0x5d0 [ 778.305603][T26197] ? fput_many+0x2f/0x1a0 [ 778.309943][T26197] ? ksys_write+0x1a5/0x250 [ 778.314549][T26197] ? __ia32_sys_read+0xb0/0xb0 [ 778.319348][T26197] __ia32_compat_sys_sendmmsg+0x9b/0x100 [ 778.325449][T26197] ? lockdep_hardirqs_on+0x463/0x620 [ 778.330742][T26197] do_fast_syscall_32+0x270/0xe90 [ 778.335780][T26197] entry_SYSENTER_compat+0x70/0x7f [ 778.464494][T26152] IPVS: ftp: loaded support on port[0] = 21 16:19:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4090ae82, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x8000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007a00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:10 executing program 0 (fault-call:3 fault-nth:2): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf250300000014000300fc00000000000000000000000000000014000300fc0000000000000000000000000000012a00070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f63616368655f743a733000000014000300fe8000000000000000000000000000aa"], 0x7c}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002dbd7000fedbdf25040000000500010001000000080005007f0000012b00070073797374656d5f753a6f626a6563745f723a64656661756c745f636f6e746578745f743a733000000500972500000000"], 0x58}, 0x1, 0x0, 0x0, 0x44080}, 0x10082) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, r2, 0xa00, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @remote}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000540)) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x47, 0x800) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r4 = syz_usb_connect(0x4, 0x7cf, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0xc2, 0x45, 0x50, 0xff, 0x1110, 0x9021, 0xf2fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7bd, 0x3, 0x7f, 0x81, 0x20, 0xe3, [{{0x9, 0x4, 0xc4, 0x1, 0x3, 0x33, 0x66, 0x5a, 0x3, [@hid_hid={0x9, 0x21, 0x8001, 0x3, 0x1, {0x22, 0x82f}}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x16, 0x56, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x2e}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x62}, @generic={0x46, 0x24, "647962559cef87367723f9eaebebc03dc4e2bb796f683b09d5e18d5db1c03cc8b273640352e16dd4acebddc5987db7d0303e0f6c1e0ccfc937328e2b852d023f65448fc5"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x9, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3f}]}}]}}, {{0x9, 0x4, 0xef, 0x0, 0xe, 0x35, 0x2e, 0x58, 0x3, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x7f, 0x3b, "d4171dc660"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x7, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb2, 0x3, 0x7, 0x5, "", "a171"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa9, 0x1, 0x3, 0x81, "e83d8e84049d68"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x5d, "", "8f59c5"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x880}, {0xd, 0x24, 0xf, 0x1, 0x55, 0x6, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x2, 0x8001}, @dmm={0x7, 0x24, 0x14, 0x1835, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5, 0x9, 0x1}]}], [{{0x9, 0x5, 0x5, 0x8, 0x200, 0x7a, 0xe3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0xcc, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x1cf, 0x3, 0x3c, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1f}, @generic={0x14, 0xd, "c45886c84bbe00b6d3f60f83e9125ed56095"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x400}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x3f, 0x7, 0x3f, [@generic={0x10, 0xb, "af66d024853d983add02494bda0a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x18, 0x8, 0x4a, 0xfb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0xe14}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3f7, 0x7, 0xff, 0x20}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x5, 0x0, [@generic={0x98, 0x23, "8b6749d286820c306acc90cb37168df932f309094b82473fed705148e37c85c220435abbc5d4f290ccc9815310cdbf36954c3a4e5cdaf621388e243c25ee9cef87c537c7bb389bc1a6526dc99b45f773c96a5dce317396e830dcd30811229777ff03acbe6fa51692a7cd85d4641da4a1022deec6e55b4fadc5607765a2440706c52c7dac7280c8ace79bb56fe761c5aeafb60438b065"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x81, 0x1, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x5, 0x1f, 0xa9}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0xa5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xff}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x9, 0x5, 0xf0, [@generic={0xc9, 0xe, "bd35cf4e3a1bd39912b64098f4408c20bf1d38c30a22043e3a0b2e71fc04ce20663121a5ac4972951327be4ff8b71fccb2668d0f906c407df550a037b4682ac5f3423686aebc25d729d455b8f7d4350040a1804169de5767aaeeedd41e0fc94e402b55fc0378f6682f0d0b185b8ae6f3d339b6852dac83de235dc3381c10660ba9effe4c78195a83cdd0f97df0f6b1a28bf8af5039085a90110d7afd17079d70171a814160ee5f2084507a7876af9544b54115200034ea69759144538c0b1263f75f8632c3a5ea"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x3, 0x2, 0x80}}]}}, {{0x9, 0x4, 0xa2, 0x24, 0xe, 0x40, 0x3a, 0x48, 0x3f, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3f, 0x1f, "db7fa5e763"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x80, 0x3f, "357813"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3f, 0x6, "", "c4"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0xff, 0x3, "ab46", "2ab0ba"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x80, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xf8, 0xa, 0x0, [@generic={0x41, 0x4, "23e89a953da4bd93b562d4f029ac4eab9b033013aa20df0648122630641bd5201c0ca040357565ecec500e9083607816eb57cc22ffc77ac0726f53ba661d5b"}, @generic={0x29, 0x22, "737818e5b2be2a96535e06c2d161d2705403278aea574ce10bb4255b8b01b990033b8d41b32ad5"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x21, 0x21, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x9, 0x9, 0x44}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x8, 0xf8, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x21, 0x5, 0x1, [@generic={0xc3, 0x3, "50951d74600180cbd1723afcd39c4cf8131d8b9778f1d9843808d8d2f01385705614fad04682e0ea0358ac019b7af9584c452b438418f539e81fe9ff1b5f71f8f70614daa725dac60424f716b68a1c8522abad5bd453b2fcbb54262d6c50c585fdc4296711e8f65a5e19b58533a4e6838782b30c899c2a2e8d104a52fd9068e4e22bd2da9af296b2e22fa5695008a0f91eb09fc69ffffe3c0a66870f492f4e377d5ad47e536b18afef34c14e0a0950873716cd845e13be526129d2421aa5ac428a"}, @generic={0xa0, 0x22, "b06b3344797dcbf9ef6dd8291e8b22249261ca33e0a1c0ea7391b2d8a3fd9799ebd1f4705d6b73a860ed1425fdc3bd0fa77e81b53eeade399ecbc23185f5819f42c0dd7fd6c1b5aa43a218b926a24b09b3af1fb4ef0c14f172d29c8b2e2497b0d8b48ead2c71d802a4acbe1a36ec3d2b5ca79a1d496b06a8d808e80850a0735bb968dbf80c8259928c44b9983bda3c9af54ea46461251fb63656cd3bda9b"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x0, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xe0, 0x7}, @generic={0x2a, 0x6, "eb687941fe423a1a46aab6530933e2ea2c4390faa499fd1ee706e5097218d09bec4d618fde57ad05"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x2, 0x20, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x1, 0x3, [@generic={0x23, 0x21, "10aab080d49c4e291279a1e509aa380aeb59ee7152fa76a9360536b38ff45e8bee"}]}}, {{0x9, 0x5, 0x1, 0x1c, 0x8, 0x5, 0x2c, 0x3f, [@generic={0xc3, 0x3, "0d4020ace8d89f15f03891f6a1dc827aed06937c83f7ba6b4691c71fcf7d41242e058b4bd46fd38faba35b1b298a51694be6c4eaefbe7aed222a24b6dbe137bb6f6e7705b104bfa628923b97c2be72d0854fc8cd84034e5d5ee9f8e226e16d0df4e19d4d05eb6288537c4b30f4c24a9ce58605e4457c7e57aa367dafc65cb28184b51d1569f03fe7a0d7d9f6ffcaa17b5a96f709168cf81a6b019ed5261d5d5d2f09a4ffa6d0c955adb1a3979298d695f7ddc2f0c0488bdf3d8fc1e7627c9f28c2"}, @generic={0x3d, 0x31, "e9ff517d5298f7ff7fec3510091d28b8ba759d6d2efd57b0fd80a95cd6c63c41fd5cca5e2f1691c9bacb5c6410605ff4a6114dc54bac0fdf59fde3"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x3, 0x80, 0x3f, [@generic={0x65, 0xa, "3f9e4979610a85ddc64066876f6521331005803be0c0a83687c060af12aa332f25b89188001e30593c6c4c4c1bf35dbd25dccbd51169f34b0d9ad668064ac5c50cbf7e1c3534cb7365ef08fc9d8050595220b2d7b0b15c0d1d7a070a0b713c2b9b8b61"}, @generic={0xc, 0x42, "7e511610e51d4367a7fd"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x7ff, 0x5, 0xda, 0x4}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x0, 0x0, 0xff}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x5, 0x81, 0x9, 0xff, 0x51}, 0x62, &(0x7f0000001480)=ANY=[@ANYBLOB="050f6200050a10030200002080090043100177238f77f69c1f357d0e68dc86adb6546f212b717ae95425ec30e4954e1c7ea7588c57f9de891ece227191578d2b8efc5e5963d0ffb0c378cf2c2cf4b46e493d03100b0a1003000d000601000003100bf8a1bcf8a0ce50b757f35a8ca6ad8309000000ae1a739ca3a74454d05a4c22a0bcc0cf00003af49a06e88d6a44edb9209dda33e38570378ab1eed83c52f9243b273d5ceb02182641057f35a44d31c9749d682531c86687d400"], 0x1, [{0xe8, &(0x7f00000002c0)=@string={0xe8, 0x3, "9786f6ce7bc7687d856f2d85a433619995120e72e46e9f0a7a2c9d44a1c12cb187e98eada94ee5fcf19106b6f8d4a544c97828dda4a3615b7da68466d1545aa4fd739e05beb7c527625e98e52216d0b88b9bfde40af15794881c45a7f81e1938e0c1c04a0122ab1f18851dd814de9ace6bd02a1023c2f3d49863eb406f858a7aa1bb03f5f3000ba558dfe97e06c02d637faa842d051a455233f9dbc6f6f34457739639fd54c187ab668602e874d9482fe20099d5b34e0eb6bc020053e788d3685a33e0f2174b19c85ce3ef4d501179fd7f45b8d0f6d7a4f006e4362a10653732ddf1603cfa34"}}]}) syz_usb_control_io(r4, &(0x7f0000000e40)={0x18, &(0x7f0000000400)={0x20, 0x5, 0xe4, {0xe4, 0x21, "608b6f11e9d3e5d9bbd8bee20d84beea384b39d651463476ba5c4c028efae49db250e29274ac2fff1ae66b6192974650bbd739babfa9cb3723c4142a390a713f6100a09ac3bc8f00d868f779f4b4897e9fe54d81523e9d843ce2f683485bcf275f06667f42d0495a7381333b905222e74c46b8238e2d26aa1c58ed5f69a161bba11a60dd1568682b56719cd772b59f1efe683d3684878ae3ada6dce494fc050d0f355c00a9ee8272b3b211def100cccba0fd2e0a1ee54926da2fd67346f73be406bc4661170d0b1e5109250a4c344e7aa27d8451ce580b66b295b242908ea6a100de"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3048}}, &(0x7f0000000d80)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "214c8c4846202367358cd994af66d635"}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0xf1, 0x3b, "d92e1cf7", "21e24337"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0xf6, 0x40, 0xe1, 0x401}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000e80)={0x20, 0x18, 0x5d, "6c82f417aa305c9d13e98b5ae4badfae93ab0597ae4f9e534ca8d159b2bbad32a47e4f407bd3111dc582cf0f8bdf2b88564bab9b9c5a24676ca81b7f1779a70e0db1961bd0499455e8e6a52728381e29e79a7ad896f116536a24955a40"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x8, {0x4, 0x8, [0xf00f]}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000001040)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001080)={0x40, 0xb, 0x2, "bc20"}, &(0x7f00000010c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001100)={0x40, 0x13, 0x6}, &(0x7f0000001140)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001180)={0x40, 0x19, 0x2, "71ce"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2, 0x9f}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x1f}}) 16:19:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007b00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 778.772716][T26245] FAULT_INJECTION: forcing a failure. [ 778.772716][T26245] name failslab, interval 1, probability 0, space 0, times 0 16:19:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x3f000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 778.829098][T26245] CPU: 0 PID: 26245 Comm: syz-executor.0 Not tainted 5.7.0-rc6-syzkaller #0 [ 778.838134][T26245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.848292][T26245] Call Trace: [ 778.851602][T26245] dump_stack+0x188/0x20d [ 778.855956][T26245] should_fail.cold+0x5/0xa [ 778.860507][T26245] ? fault_create_debugfs_attr+0x140/0x140 [ 778.866423][T26245] ? __nf_conntrack_find_get+0x9f4/0x12d0 [ 778.872231][T26245] should_failslab+0x5/0xf [ 778.876759][T26245] kmem_cache_alloc+0x44/0x740 [ 778.881539][T26245] ? __alloc_skb+0x3a7/0x5a0 [ 778.886172][T26245] __nf_conntrack_alloc+0xd6/0x6b0 [ 778.891312][T26245] init_conntrack.isra.0+0xd7e/0x1080 [ 778.896703][T26245] ? nf_conntrack_alloc+0x40/0x40 [ 778.901734][T26245] ? hash_conntrack_raw+0x2d9/0x460 [ 778.907006][T26245] ? ipt_do_table+0xcca/0x1880 [ 778.911771][T26245] ? __local_bh_enable_ip+0x159/0x270 [ 778.917158][T26245] nf_conntrack_in+0x9ae/0x12b0 [ 778.922024][T26245] ? nf_conntrack_update+0x9f0/0x9f0 [ 778.927323][T26245] ? lock_acquire+0x1f2/0x8f0 [ 778.932012][T26245] ipv4_conntrack_local+0x119/0x210 [ 778.937214][T26245] nf_hook_slow+0xba/0x1e0 [ 778.941680][T26245] __ip_local_out+0x3d4/0x850 [ 778.946359][T26245] ? ip_finish_output+0x1f0/0x1f0 [ 778.951384][T26245] ? __ip_flush_pending_frames.isra.0+0x300/0x300 [ 778.957789][T26245] ? ip_reply_glue_bits+0xb0/0xb0 [ 778.962813][T26245] ip_local_out+0x26/0x1a0 [ 778.967230][T26245] ip_send_skb+0x3e/0xe0 [ 778.971473][T26245] udp_send_skb.isra.0+0x6cb/0x11c0 [ 778.976673][T26245] udp_sendmsg+0x1ea8/0x2820 [ 778.981271][T26245] ? ip_reply_glue_bits+0xb0/0xb0 [ 778.986298][T26245] ? udp_unicast_rcv_skb.isra.0+0x350/0x350 [ 778.992196][T26245] ? __lock_acquire+0x2184/0x4c50 [ 778.997235][T26245] ? ima_match_policy+0x92d/0x13d0 [ 779.002356][T26245] ? mark_held_locks+0xe0/0xe0 [ 779.007114][T26245] ? save_stack+0x32/0x40 [ 779.011469][T26245] ? do_sys_openat2+0x585/0x7d0 [ 779.016336][T26245] ? lock_acquire+0x1f2/0x8f0 [ 779.021012][T26245] ? mark_lock+0x12b/0xf10 [ 779.025480][T26245] ? udpv6_sendmsg+0x14d6/0x2b50 [ 779.030412][T26245] udpv6_sendmsg+0x14d6/0x2b50 [ 779.035177][T26245] ? __lock_acquire+0x2184/0x4c50 [ 779.040211][T26245] ? udp_v6_get_port+0x690/0x690 [ 779.045156][T26245] ? __lock_acquire+0x2184/0x4c50 [ 779.050212][T26245] ? find_held_lock+0x2d/0x110 [ 779.054982][T26245] ? __might_fault+0x11f/0x1d0 [ 779.059750][T26245] ? aa_label_sk_perm+0x89/0xe0 [ 779.064618][T26245] ? aa_sk_perm+0x319/0xab0 [ 779.069125][T26245] ? compat_rw_copy_check_uvector+0x36b/0x4a0 [ 779.075207][T26245] ? aa_af_perm+0x260/0x260 [ 779.079732][T26245] ? inet6_sendmsg+0x99/0xe0 [ 779.084330][T26245] inet6_sendmsg+0x99/0xe0 [ 779.088748][T26245] ? inet6_ioctl+0x1b0/0x1b0 [ 779.093344][T26245] sock_sendmsg+0xcf/0x120 [ 779.097764][T26245] ____sys_sendmsg+0x308/0x7e0 [ 779.102539][T26245] ? get_compat_msghdr+0xd1/0x120 [ 779.107566][T26245] ? kernel_sendmsg+0x50/0x50 [ 779.112245][T26245] ? mark_lock+0x12b/0xf10 [ 779.116670][T26245] ___sys_sendmsg+0x100/0x170 [ 779.121366][T26245] ? sendmsg_copy_msghdr+0x70/0x70 [ 779.126487][T26245] ? rcu_read_lock_held_common+0x130/0x130 [ 779.132297][T26245] ? __fget_files+0x32f/0x500 [ 779.136984][T26245] ? ksys_dup3+0x3c0/0x3c0 [ 779.141404][T26245] ? __fget_light+0x20e/0x270 [ 779.146082][T26245] __sys_sendmmsg+0x296/0x480 [ 779.150766][T26245] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 779.155816][T26245] ? lock_downgrade+0x840/0x840 [ 779.160681][T26245] ? __mutex_unlock_slowpath+0xe2/0x660 [ 779.166305][T26245] ? wait_for_completion+0x270/0x270 [ 779.171604][T26245] ? __this_cpu_preempt_check+0x28/0x190 [ 779.177241][T26245] ? __sb_end_write+0x101/0x1d0 [ 779.182209][T26245] ? vfs_write+0x161/0x5d0 [ 779.186640][T26245] ? fput_many+0x2f/0x1a0 [ 779.190977][T26245] ? ksys_write+0x1a5/0x250 [ 779.195486][T26245] ? __ia32_sys_read+0xb0/0xb0 [ 779.200952][T26245] __ia32_compat_sys_sendmmsg+0x9b/0x100 [ 779.206601][T26245] ? lockdep_hardirqs_on+0x463/0x620 [ 779.211902][T26245] do_fast_syscall_32+0x270/0xe90 [ 779.216938][T26245] entry_SYSENTER_compat+0x70/0x7f 16:19:11 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 779.239830][T26251] IPVS: ftp: loaded support on port[0] = 21 16:19:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xfdfdffff, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 779.378734][ T9670] usb 3-1: new high-speed USB device number 66 using dummy_hcd 16:19:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xff000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 779.658819][ T9670] usb 3-1: Using ep0 maxpacket: 16 16:19:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xfffffdfd, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 779.757911][T26251] IPVS: ftp: loaded support on port[0] = 21 [ 779.789766][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 16:19:11 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 779.814778][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.917050][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:19:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x4400ae8f, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x100000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007c00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:12 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 780.039324][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 780.060191][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 780.108798][ T9670] usb 3-1: SerialNumber: syz [ 780.135605][ T9670] usb 3-1: config 0 descriptor?? [ 780.254293][T26332] IPVS: ftp: loaded support on port[0] = 21 [ 780.486484][T26332] IPVS: ftp: loaded support on port[0] = 21 [ 780.841141][ T9670] hid-multitouch 0003:045E:87F5.0033: unknown main item tag 0x0 [ 780.849131][ T9670] hid-multitouch 0003:045E:87F5.0033: unknown main item tag 0x0 [ 780.857915][ T9670] hid-multitouch 0003:045E:87F5.0033: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 781.043961][ T9666] usb 3-1: USB disconnect, device number 66 [ 781.828791][ T9670] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 782.068783][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 782.188875][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.203613][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.213796][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:19:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x880) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900cb0083bfe876ed6dbc1eb5d7a82d043bcae2a300e7bf759388bd14f81f1d0b5bff49aebe69cb0e13614df7095d0a47e45722da493ceef22634b89814d7fdea67774f6e3a2faf9b1c269ae11bab2f5c6c5c791c4018267cd63ba842196a9cee0fe20d2baafe433df897d21e0fa00ad728866c8a361391ee15d9773df6789f09f64bf5f9"], 0x0}, 0x0) 16:19:14 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:14 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x2, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007d00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x200000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:14 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x80086301, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 782.308954][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 782.318022][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 782.327442][ T9670] usb 3-1: SerialNumber: syz [ 782.334015][ T9670] usb 3-1: config 0 descriptor?? [ 782.388419][ T9670] usb 3-1: can't set config #0, error -71 [ 782.413060][ T9670] usb 3-1: USB disconnect, device number 67 [ 782.452704][T26403] IPVS: ftp: loaded support on port[0] = 21 16:19:14 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x4, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007e00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x300000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000007f00000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:14 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x7, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x400000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 782.918995][ T9670] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 783.158806][ T9670] usb 3-1: Using ep0 maxpacket: 16 [ 783.178402][T26403] IPVS: ftp: loaded support on port[0] = 21 [ 783.279447][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.294245][ T9670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.328950][ T9670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 783.429989][ T9670] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 783.442826][ T9670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 783.451259][ T9670] usb 3-1: SerialNumber: syz [ 783.467021][ T9670] usb 3-1: config 0 descriptor?? [ 784.171078][ T9670] hid-generic 0003:045E:87F5.0034: unknown main item tag 0x0 [ 784.179935][ T9670] hid-generic 0003:045E:87F5.0034: item fetching failed at offset 33/34 [ 784.188669][ T9670] hid-generic: probe of 0003:045E:87F5.0034 failed with error -22 [ 784.372443][T20095] usb 3-1: USB disconnect, device number 68 [ 785.158890][T20095] usb 3-1: new high-speed USB device number 69 using dummy_hcd 16:19:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000140)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100302d60e27b577309be4a04000000105e04f587000000001e01090224000100002800000904000009030000000921"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x101) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f00000000c0)) 16:19:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x80108906, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x500000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:17 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x9, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:17 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000040000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000140000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 785.349850][T26508] IPVS: ftp: loaded support on port[0] = 21 [ 785.360290][T26510] IPVS: ftp: loaded support on port[0] = 21 16:19:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x600000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:17 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xa, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000240000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x700000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:17 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 785.918973][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 786.071985][T26510] IPVS: ftp: loaded support on port[0] = 21 [ 786.079028][T20095] usb 3-1: unable to get BOS descriptor or descriptor too short [ 786.090377][T20095] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 786.219532][T20095] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 786.227273][T20095] usb 3-1: can't read configurations, error -61 [ 786.378961][T20095] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 786.668862][T20095] usb 3-1: device descriptor read/64, error 18 [ 787.068851][T20095] usb 3-1: device descriptor read/64, error 18 [ 787.188964][T20095] usb usb3-port1: attempt power cycle [ 787.898850][T20095] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 787.988986][T20095] usb 3-1: Invalid ep0 maxpacket: 123 [ 788.138881][T20095] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 788.228958][T20095] usb 3-1: Invalid ep0 maxpacket: 123 [ 788.234495][T20095] usb usb3-port1: unable to enumerate USB device 16:19:20 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000340000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:20 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x11, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x800000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x80108907, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000307000000090300000009210000000122220009058103"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffaa, &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r4, 0x1ba}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x7, 0x80000001, 0x101}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00032c0000002c03a36e1030d291113c7b4db0bf9e2e8f43b1bcc616640984c7db51f4e7b3d000000000000000000000000064c01ac3c9bc3c70e5bb62cdbdf0683f703c325cdb27f590f4f31cba140b2656b7a0dfdd53dcba76c3ec3022c12532a45dc2feb23f3c9b579b9644cbba0e7b2668e40e1dfbac5f4dcc54a1366bed089bc5dc05aa30907857cefb75dcc42ae2361b541c164f6c4030838258e08d1457dcde177976b9b2b7828b579e407a1209f88996228ac0d9db9f8a3fc884992d75975c"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) r5 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x10040, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r8, 0x3}, &(0x7f0000000200)=0x8) [ 788.417357][T26609] IPVS: ftp: loaded support on port[0] = 21 16:19:20 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 788.464996][T26613] IPVS: ftp: loaded support on port[0] = 21 16:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000440000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x3f00000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:20 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1f4, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xfdfdffff00000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000540000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 788.809175][T20095] usb 3-1: new high-speed USB device number 73 using dummy_hcd 16:19:20 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:20 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x3e8, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000640000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0xff00000000000000, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 789.009892][T26681] IPVS: ftp: loaded support on port[0] = 21 [ 789.049756][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 789.169691][T20095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.204192][T20095] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.235995][T26609] IPVS: ftp: loaded support on port[0] = 21 [ 789.329561][T20095] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 789.338665][T20095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 789.369335][T20095] usb 3-1: SerialNumber: syz [ 789.384238][T20095] usb 3-1: config 0 descriptor?? 16:19:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xc0045878, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 789.473953][T26740] IPVS: ftp: loaded support on port[0] = 21 [ 789.643176][T26740] IPVS: ftp: loaded support on port[0] = 21 16:19:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0) 16:19:23 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x700, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000740000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x1) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x802) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:23 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:23 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xc0045878, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 791.704513][ T9670] usb 3-1: USB disconnect, device number 73 16:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000840000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 791.786704][T26799] IPVS: ftp: loaded support on port[0] = 21 [ 791.807939][T26800] IPVS: ftp: loaded support on port[0] = 21 16:19:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300000b630000ff08574fd64f2a19d9f7ae15b073d0d23d0ddf612dc2d0db848463dfb3ab67db31b86cbaa379e7bb4fae3f2c769a6e4da65c577227be8072a3e974cd993d257e3c37931f2bd1560015f8a453524640c7724251ea4fba31597b4a0130dab96d6631647b5d45c5f958020059d626bba4a571a858fa8ef9e61d005a7b179935085eb0ec182160"], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xffff, &(0x7f0000000040)="3caa5bd65ae46c081e0c701e29240f259f9b20511c") syz_emit_ethernet(0x117, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipx={0x8137, {0xffff, 0x109, 0x0, 0x14, {@random=0x7, @random="c9b3349faddb", 0x4}, {@current, @current, 0x7}, "934aa71a7ebfab6bac1f62966be2191c7bb684de0b5b35a1eb25ea688d4921880f5e1b95e5bc4576b0ebd7a26998d18ad905b2ee2963cd4344e5734b6753e05f0d5e5b39295c038a0a4688181b503d4dfc7e84d491ee33621f2a9421e3ea3d854733f67b5a55df90b538616cb177a8d29c68a895713fd5d1111b9d61f238393f29dff6954e848d128a3bc699904e606ed03823ad140663aa2b2d819fb93f82eda21edbf1e20eefb10ea628a0c4fdb4777aea1d0bf89204b4e67e78c3c5c2679e8a722cb087c686c0d9db4cd30506f706d0e6c1b41e4f3cf9b52de2de748d5693fa78d53afaf5d5c4dba20b"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x797, 0xd95, 0x734, 0xa20]}) 16:19:23 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x900, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000940000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 792.002860][T26830] binder: 26820:26830 ioctl ffff 20000040 returned -22 [ 792.060886][T26830] binder: 26820:26830 ioctl ffff 20000040 returned -22 16:19:24 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000a40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 792.198932][T20095] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 792.285737][T26863] IPVS: ftp: loaded support on port[0] = 21 [ 792.443422][T26800] IPVS: ftp: loaded support on port[0] = 21 [ 792.459166][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 792.580011][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.600478][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.615959][T20095] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.709545][T20095] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 792.720129][T20095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 792.731601][T20095] usb 3-1: SerialNumber: syz [ 792.738281][T20095] usb 3-1: config 0 descriptor?? [ 793.499065][T20095] usbhid 3-1:0.0: can't add hid device: -71 [ 793.505250][T20095] usbhid: probe of 3-1:0.0 failed with error -71 [ 793.527236][T20095] usb 3-1: USB disconnect, device number 74 [ 794.189042][T20095] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 794.429106][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 794.549152][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.566655][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.578741][T20095] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 794.669189][T20095] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 794.678562][T20095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 794.689058][T20095] usb 3-1: SerialNumber: syz [ 794.700971][T20095] usb 3-1: config 0 descriptor?? 16:19:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000840)='tls\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) sendmsg$inet_sctp(r2, &(0x7f0000000800)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="662a9448e454d4bfd25f03839d58e2898f7ae10c5ee6ec3bb411e9b0abfbd2a70e8574134dc948e884838b59c8726d113d7dd45dedc312d45468db4533dad029a8574afbdb653a1d038944eb6186fbf1f7b2bce14165d0a8636b71c0dce14c043d7d79c87c229e2fe707d499a09e5698c9149b66076edf8684dc26b1f158517e85f6eee82ca0928de214389eb4", 0x8d}, {&(0x7f00000002c0)="4551fb27baa65a1e5331f90d19dd5c4dc5d5df8e0b8a52cb9da8f04dd4dc105c779c61bc19cbb83a0ad1af9c7696d9c8b6aa08181bca9126f36887d1721643a8511108d84a565aa38d828c99abce31d6ac36057fae1f7c01b6a6387df111ff7fbb74a2be1ca38a86a982fe7e2036abec6a1786341cb770dc631aca437e25246e01ee891b113efee441cfea4c07f8e96645169eff05f6d5cd5416a2a5c3", 0x9d}, {&(0x7f0000000380)="6aeeda88bc1a3d051e40a0b855ff0dbed25c9e694496cfabc893babdd259201f03ab54b9a26dbf4b254cebe94d99a07100eae28919dc5a786977df44bd3978fd3b436c5a8a982aeafc9c1c74bd9bc0f4e736afac452b99fb04417869a4bc37dc4e25a9448e89611f7a959fe65cc119f03e7780eebc4d7938d8eccf4dd9d7bc03692c5a9efee64a8f90155bdc4dbde111d4895b3d7e9afd20b8251d5998374075e2efbfdb69551720a240b36368f2340df580703ec42748b8c85914812cc33f6b4590", 0xc2}, {&(0x7f0000000480)="0708fad70f569527be4f2c28af8cc867e35ea803caa61188a0a6e32df5dfbdec662ff6e0c917d89c901ee6ed8189191772a09076240660f9b6ce964ea6b1799233fdf0738a2d3f2bc2c03b0a98e9f61dbca249b77597fac9ed408bea258650166c0bc24269f6db20c6e7864a98f4390d762c92ab29d08941302330ebe1f6407006180f8953288a3f90e08683b057ba24d381af6e88f6e5e72aacfd72bc939d705700ee64e087ac4374e6df34992184a9c9a764a9be81006c58b211a3fb59c1548cf6dca349acac2f26dcfa80e3f4d7c19d15329765affb7ba355ab2570ef63ac5d2081fddfd60fb2e9b6c56bd0d8ec7bfce3f935dadf6792", 0xf8}, {&(0x7f0000000580)="5ff1a72ae41f459ceac1672e5f89110540251e931f4ad2a6a3c85d2a71381bc7c98a6ca6931f1e6979b2671ca862685d8e360dfb877d8d235f679b89efdf3970f7f65ad47072162d1302beb22f2b8d7bcd542560990f34b397ac081e512b417bb0ad560699a8424cccb6f4b73075d9aaa3705aa30887496fdc0d", 0x7a}, {&(0x7f00000000c0)}, {&(0x7f0000000600)="74d3b405770c5b6e619576d7822b97694789e0fb3645d36d262cf9ebb19a524b755d3913d461d99ff00e404be4f4e97f591025d7343f03c8811e9d5a066494ea8b8953c3f26915cdb195a8cf9a0dc9b2fb8684729eae045f54838e6ae5a724183eed3d7f6feb8812ceb4d96c973b983de1d51c348f455925c376487bcce9c504eb14156676dd1c5d8fd4c03c29acc6cff2dfe063785d571d88b90f40061c8c7a319bc41d7a6ada62bcffa4aae75349f05024c7ea419040d78e970cff53e9d84b4c4e1177519e9e2f6312cb047c23ed2ef068341ffbb82ade872884ea766e96d30b55e91d68a20a0b", 0xe8}, {&(0x7f0000000700)="30dda1586a2b3d75bdeaf850451772c77c57d759079f832e4609377d2939f3e649061f2b226afeedcc77189dd19268f66f8e50c2e50ff903732f333646f7536b24", 0x41}], 0x8, &(0x7f0000000780)=[@prinfo={0x14, 0x84, 0x5, {0x20, 0x7fffffff}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x7dd2}}, @dstaddrv4={0x10, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv4={0x10, 0x84, 0x7, @multicast2}, @prinfo={0x14, 0x84, 0x5, {0x30, 0xd6b}}], 0x5c, 0x10}, 0x80) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:19:26 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xa00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000540)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000b40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:26 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xc0189436, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 794.960542][T26930] IPVS: ftp: loaded support on port[0] = 21 16:19:27 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xbb8, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 795.014134][T26932] IPVS: ftp: loaded support on port[0] = 21 [ 795.029120][T20095] usbhid 3-1:0.0: can't add hid device: -71 [ 795.047307][T20095] usbhid: probe of 3-1:0.0 failed with error -71 16:19:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r3, 0x0, 0x98, &(0x7f00000002c0)='\xec\x9e\xc7\xec\xb8\x06r\xc2\x1c\xf6\x8bHs\x15\x95\xa1\xa5\x1e\xe8v\xdf\xd16M\xf2\xdbD\xb9\xeb\xfak\xf1\xc0\xc8\xd0\xdb*\xe6S\xfe\xef\x17A\'\xef\xc1K\xae\x18\xf3\x02\xf1\xe1\xf6\t`\xaf\x14\xd4\xa0\xf8\xcd\x81\xd3\x9de\x15\xc2L\xa4\xdbqEb7\\E\x9dp\x8b_\xa7\x89L\x97u\xf1\xf8\x1b\xe9\xb0\xb9\xf5\x8bs\nX\x1b\xd4\x91\xf30ei\xed\xc7Vt\xd2ani\xe4?\x18\x13b\xee\x17ng{\xc0\xc1\xfca\x92A@\xc3{\xea.\xf3[\x14\xa9$\x19\x19\xf9Q\tB\xa1\xee4Q16\n\xa4'}, 0x30) ptrace$peekuser(0x3, r6, 0x8001) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000100)="470c4ce52ff90b98dfda0b589ec00cd074b7b7df7bab1267d6bd58471fa9e87945dc8a35338ed6ece8cf2b9c851adcd36298e396fec658347296b432fad16afa824e8e481cf36d4113921f01d96276f92171bedd6a83bce93cf31175cad5315f0f861f17f22fd45a7945c72dc431c22690d0482e82522c7d11fde524825bf621142ff874816facd3475aad4c0b869ab1c03628fa3b98e7", 0x97}, {&(0x7f00000001c0)="7ffdd9c89b7c59bf80cc37d94d74c06b78f9dae96c4b4a34c0aa80775d11a0ddcde32c301c4efeafc91b48d65de19c93120ab31c15726b283e8f880ab880850127194843b5b1b57a85fd97a234f86f6e4bebb22cdfeeccadb8092f47b8d84aabe71cebd9f4b1e1d86ed5ac6d3481381cd54e11f4e863de", 0x77}, {&(0x7f0000000240)="5079f8e8c9b608865a7fa742d6e6bb763ce67abf33ce45ebb884067f9ec425e9fa7f67c7bbdd146c66e815a4ace4d2d8ccbb1d13d3a83d9376", 0x39}], 0x3) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000c40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 795.109393][T20095] usb 3-1: USB disconnect, device number 75 16:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000d40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:27 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xe00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000e40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 795.519156][T20095] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 795.651589][T26930] IPVS: ftp: loaded support on port[0] = 21 [ 795.758902][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 795.881854][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.901607][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.915550][T20095] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.027778][T20095] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 796.039539][T20095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 796.048410][T20095] usb 3-1: SerialNumber: syz [ 796.059377][T20095] usb 3-1: config 0 descriptor?? 16:19:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000125e04f587fbff00001e0109022400010000000100040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x7ff, @ipv4={[], [], @rand_addr=0x64010100}, 0x4}}, [0x6, 0x0, 0x1, 0x80000000, 0x800, 0xfff, 0xffffffffffffff80, 0x7, 0x3, 0x9, 0x3, 0x10000, 0x3f7a, 0x8, 0x3]}, &(0x7f0000000000)=0xfc) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:19:28 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:28 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1100, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000000f40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:28 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0xc020660b, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) ioprio_get$uid(0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@delpolicy={0x190, 0x14, 0x210, 0x70bd25, 0x25dfdbfc, {{@in6=@private0, @in6=@mcast1, 0x4e22, 0x8, 0x4e20, 0x5, 0xa, 0x0, 0x20, 0x67, r5, r6}, 0x6e6bb7, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_auth_trunc={0x137, 0x14, {{'cbcmac-aes-ce\x00'}, 0x758, 0xa0, "04fea0ea5c14a457258dc68d8b41d35c6b13b67581b8bd3fefc9890b34a49c1ec419dee27dca41f70a734da3fdb78f00101b1527d7b01e8613e04c7d8b701ab522ec055d470091b91c51380522219022737ecf2f41699476cb371cf870243b3744efee9acb8e225b5f4b36557f3589a1c493931c435332c39aadb428a2f5016e9e3db1cd0f0e406a5ca81914cf23a913b5c3229e30969abb56da49cfe2758f134edfd844aff3a409b82ddd7c509d3c77481536d45bab6385514ec36ae119db72844ff718da88200a3885d3f92c236e913884606439ce47013f9f3f2f5189439744f70572c45026dce34e51"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40c1}, 0x8080) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 796.819127][T20095] usbhid 3-1:0.0: can't add hid device: -71 [ 796.827590][T20095] usbhid: probe of 3-1:0.0 failed with error -71 [ 796.848673][T27040] IPVS: ftp: loaded support on port[0] = 21 [ 796.861513][T27039] IPVS: ftp: loaded support on port[0] = 21 16:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001040000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 796.904906][T20095] usb 3-1: USB disconnect, device number 76 16:19:28 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1c00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = fcntl$dupfd(r2, 0x406, r3) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xdc, 0x4, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44804) r5 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x4, 0xd8, 0x7}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300000b6300003eecd7c111714e258d41cda8206c704dcadd8330a969a198838636ab52cea524f4054bf050a84a7cbd741945b505b4e443c521e9433d60ac88efe84ed2433af12d5aa3"], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001140000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:29 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x2000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgid(r4) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r5) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 797.318942][T20095] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 797.539540][T27111] binder: 27108:27111 unknown command 2 [ 797.545157][T27111] binder: 27108:27111 ioctl c0306201 200000c0 returned -22 [ 797.607608][T27039] IPVS: ftp: loaded support on port[0] = 21 [ 797.615566][T20095] usb 3-1: device descriptor read/64, error 18 [ 797.827922][T27111] binder: 27108:27111 unknown command 2 [ 797.835987][T27111] binder: 27108:27111 ioctl c0306201 200000c0 returned -22 [ 798.009019][T20095] usb 3-1: device descriptor read/64, error 18 [ 798.279023][T20095] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 798.548959][T20095] usb 3-1: device descriptor read/64, error 18 [ 798.939008][T20095] usb 3-1: device descriptor read/64, error 18 [ 799.059673][T20095] usb usb3-port1: attempt power cycle [ 799.769003][T20095] usb 3-1: new high-speed USB device number 79 using dummy_hcd 16:19:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x20000) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000140)) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/92) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64=r4, @ANYRES16=r7, @ANYBLOB="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"], 0x0}, 0x0) 16:19:31 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x3f00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001240000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x3, 0x0, @empty}}) 16:19:31 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x0, 0x0, 0x1, "b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x48, &(0x7f0000000040)={[{0x41, 0x4e00, "1f9bfa7d4b8d58f6d8d9c99c9fa84a8be6903f625e740a72133ddf358744fb56361d5611f53681a3a5bf574934035479f5509ea3a35308056f8876aba42ece24b7"}]}) [ 799.860008][T20095] usb 3-1: Invalid ep0 maxpacket: 18 [ 799.960468][T27149] IPVS: ftp: loaded support on port[0] = 21 [ 799.970023][T27148] IPVS: ftp: loaded support on port[0] = 21 16:19:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xb80b, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001340000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xe803, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 800.229547][ T9666] usb 4-1: new high-speed USB device number 8 using dummy_hcd 16:19:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001440000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xf401, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x34000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 800.529043][T20095] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 800.589464][ T9666] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 800.607027][ T9666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.655056][ T9666] usb 4-1: config 0 descriptor?? [ 800.669710][T20095] usb 3-1: Using ep0 maxpacket: 16 [ 800.741948][T27149] IPVS: ftp: loaded support on port[0] = 21 [ 800.796227][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.830412][T20095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.865328][T20095] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 800.966344][T20095] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 800.980241][T20095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 800.998388][T20095] usb 3-1: SerialNumber: syz [ 801.007582][T20095] usb 3-1: config 0 descriptor?? [ 801.159111][ T9666] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 801.175185][ T9666] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 801.210034][ T9666] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 801.240715][ T9666] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 801.252705][ T9666] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 801.450437][ T9666] asix: probe of 4-1:0.0 failed with error -71 [ 801.469081][ T9666] usb 4-1: USB disconnect, device number 8 [ 801.789078][T20095] usbhid 3-1:0.0: can't add hid device: -71 [ 801.795104][T20095] usbhid: probe of 3-1:0.0 failed with error -71 [ 801.810605][T20095] usb 3-1: USB disconnect, device number 80 [ 802.519052][ T9666] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 802.788973][ T9666] usb 3-1: Using ep0 maxpacket: 16 [ 802.919428][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.932606][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.946843][ T9666] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 803.039086][ T9666] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 803.048280][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 803.057559][ T9666] usb 3-1: SerialNumber: syz [ 803.063822][ T9666] usb 3-1: config 0 descriptor?? 16:19:35 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x40000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001540000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x4, 0x0, @empty}}) 16:19:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 803.228337][T27281] IPVS: ftp: loaded support on port[0] = 21 [ 803.239253][T27284] IPVS: ftp: loaded support on port[0] = 21 [ 803.241273][T27285] binder: 27280:27285 ioctl 81a0ae8c 20000100 returned -22 16:19:35 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x400300, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 803.269336][ T9666] usbhid 3-1:0.0: can't add hid device: -71 [ 803.276899][ T9666] usbhid: probe of 3-1:0.0 failed with error -71 16:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001640000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 803.342532][T27288] binder: 27280:27288 ioctl 81a0ae8c 20000100 returned -22 [ 803.370853][ T9666] usb 3-1: USB disconnect, device number 81 16:19:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) ioprio_get$uid(0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x2}}}, 0x78) chown(&(0x7f0000000140)='./file0\x00', 0x0, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) ioprio_get$uid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x2}}}, 0x78) chown(&(0x7f0000000140)='./file0\x00', 0x0, r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r5, &(0x7f0000000100)=ANY=[], 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)=0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x1, r1, r2, r3, r4, 0x10, 0x4}, 0x0, 0x0, 0x1, 0x40, 0x9, 0x4, 0x3, 0x7fff, 0x8728, 0x7, r6, r7}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 16:19:35 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfffffffe, 0x4000) pipe(&(0x7f00000000c0)) pipe(&(0x7f00000000c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0xa) prctl$PR_SET_DUMPABLE(0x4, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) pipe(&(0x7f00000000c0)) read$midi(r6, 0x0, 0xffffffffffffffa3) 16:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001740000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 803.697632][T27346] binder: 27342:27346 unknown command 0 [ 803.711688][T27346] binder: 27342:27346 ioctl c0306201 200000c0 returned -22 [ 803.738774][T27346] binder: 27342:27346 unknown command 0 16:19:35 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x2000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001840000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 803.767697][T27346] binder: 27342:27346 ioctl c0306201 200000c0 returned -22 16:19:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000580)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 803.929441][ T9666] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 804.152832][T27284] IPVS: ftp: loaded support on port[0] = 21 [ 804.179601][ T9666] usb 3-1: Using ep0 maxpacket: 16 16:19:36 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 804.299735][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.330764][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.353674][ T9666] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 16:19:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x5, 0x0, @empty}}) 16:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001940000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:36 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x4000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r2 = socket$inet(0x2, 0xa, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000180)=0x75) r6 = socket$inet(0x2, 0x4000000000080809, 0xffff) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) r8 = dup2(r0, r2) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300002d9ebfd96473ce9c3db445cb720c85b98b0057d6969605a71e2b323e73346a00f4422abe1ad4912462e5cb5859c3e3aceba5"], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) [ 804.424101][T27391] IPVS: ftp: loaded support on port[0] = 21 [ 804.459761][ T9666] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 804.481181][ T9666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 804.521617][ T9666] usb 3-1: SerialNumber: syz [ 804.582883][ T9666] usb 3-1: config 0 descriptor?? [ 804.605863][T27412] IPVS: ftp: loaded support on port[0] = 21 [ 804.938410][T27412] IPVS: ftp: loaded support on port[0] = 21 [ 805.311538][ T9666] hid-multitouch 0003:045E:87F5.0035: unknown main item tag 0x0 [ 805.319442][ T9666] hid-multitouch 0003:045E:87F5.0035: unknown main item tag 0x0 [ 805.328636][ T9666] hid-multitouch 0003:045E:87F5.0035: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 805.521815][T20095] usb 3-1: USB disconnect, device number 82 [ 806.299047][ T3339] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 806.539046][ T3339] usb 3-1: Using ep0 maxpacket: 16 [ 806.659146][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.670144][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.681835][ T3339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 806.769456][ T3339] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 806.779108][ T3339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 806.787272][ T3339] usb 3-1: SerialNumber: syz [ 806.798182][ T3339] usb 3-1: config 0 descriptor?? 16:19:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c6300000b6300009e964a1747d6aefc8d51d24eb76ffc7ee5603cfc36078095d2e842d4fb209a23b1cf6c34d9fb2442e237453180f3402fda3a5e608810300631d50f3984d435937e719be2529d4902cca3da5f18df1b6ed18325fca3ba64d943f16347adc99968f5a8aa00423ccba8b0d8243f731611088e4b7cc4b2f51dc277d6e578598b3cf6212ecdedbea77c897a161b28de234ca5e3bb1d1e615858db72e1a8ba45134822bb22c33431538d3d870ac57b"], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[], 0x1) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000300)={0x2000}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_ENTRY(r2, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x2, 0x3, 0x8, 0x80000001, 0x0, 0xffffffa2, {0x2, 0x10001, 0x1, 0x10000, 0xc19, 0x8, 0xe48, 0x3c, 0x3f, 0x0, 0x7, r5, r6, 0x2, 0xffffffff}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x1006) preadv(r7, &(0x7f0000000500), 0x37d, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001a40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:38 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x7000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:38 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x6, 0x0, @empty}}) 16:19:38 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105e04f587000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be0083"], 0x0}, 0x0) [ 806.860028][ T3339] usb 3-1: can't set config #0, error -71 [ 806.884685][ T3339] usb 3-1: USB disconnect, device number 83 [ 806.935205][T27499] binder: 27493:27499 ioctl b704 20000040 returned -22 [ 806.969376][T27500] IPVS: ftp: loaded support on port[0] = 21 16:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001b40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 806.991820][T27503] IPVS: ftp: loaded support on port[0] = 21 16:19:39 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x9000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 807.120543][T27526] binder: 27493:27526 ioctl b704 20000040 returned -22 16:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001c40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "039e827615c58d6b", "d727aae0dce56c090fa5c44c4dfb192d", "01f0a83f", "b7c2a2669f6a3915"}, 0x28) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x5) open_by_handle_at(r6, &(0x7f0000000380)={0x26, 0xfec2, "b9152b5d2216f6ff5ef7752f14eda3f68f6d526fc4c13c9d361fae43e608"}, 0x0) r7 = dup2(r5, r0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x50) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000300)={'filter\x00'}, &(0x7f00000002c0)=0x50) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x48, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a64660000ed8fa3b60c7bbf000000000000a07978412a753f537ebb3727bd7ff8045b76c556", @ANYRES32=r8, @ANYBLOB="00000000000000000000000085616466030000000000000002000000000000001e0000000000000085616466030000000000000002000000000000003400000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x34}}}, @enter_looper], 0x0, 0x0, 0x0}) read$midi(0xffffffffffffffff, 0x0, 0x0) 16:19:39 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xa000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001d40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 807.409090][ T3339] usb 3-1: new high-speed USB device number 84 using dummy_hcd 16:19:39 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0xe000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001e40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:39 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x11000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) [ 807.659076][ T3339] usb 3-1: Using ep0 maxpacket: 16 [ 807.779872][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.803591][ T3339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.846783][ T3339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 807.979302][ T3339] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 807.993086][ T3339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 808.008879][ T3339] usb 3-1: SerialNumber: syz [ 808.029830][ T3339] usb 3-1: config 0 descriptor?? 16:19:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x7, 0x0, @empty}}) 16:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000001f40000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) [ 808.731547][ T3339] hid-multitouch 0003:045E:87F5.0036: unknown main item tag 0x0 [ 808.744898][ T3339] hid-multitouch 0003:045E:87F5.0036: unknown main item tag 0x0 [ 808.754784][ T3339] hid-multitouch 0003:045E:87F5.0036: hidraw0: USB HID v0.00 Device [HID 045e:87f5] on usb-dummy_hcd.2-1/input0 [ 808.932952][ T3336] usb 3-1: USB disconnect, device number 84 [ 809.709085][ T3336] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 809.949106][ T3336] usb 3-1: Using ep0 maxpacket: 16 [ 810.069154][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.080355][ T3336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.091575][ T3336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 810.179143][ T3336] usb 3-1: New USB device found, idVendor=045e, idProduct=87f5, bcdDevice= 0.00 [ 810.188748][ T3336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 810.197183][ T3336] usb 3-1: SerialNumber: syz [ 810.208139][ T3336] usb 3-1: config 0 descriptor?? 16:19:42 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 16:19:42 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002400)=[{{0x0, 0x1c000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 16:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000002040000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000000006c000000160a7fd40670000000000000010000000900010073797a30000000000900020073797a3200000000400003802c000380140001007369743000030000000000000000000014711c00000000000000000000000000000000000800024000000000080001400000000014000000020a050000000000000000000000000014000000110001"], 0xc8}}, 0x0) 16:19:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x8, 0x0, @empty}}) [ 810.269867][ T3336] usb 3-1: can't set config #0, error -71 [ 810.308459][ T3336] usb 3-1: USB disconnect, device number 85 [ 874.890718][ T144] tipc: TX() has been purged, node left! [ 874.896847][ T144] tipc: TX() has been purged, node left! [ 874.910234][ T144] tipc: TX() has been purged, node left! [ 874.916272][ T144] tipc: TX() has been purged, node left! [ 874.929771][ T144] tipc: TX() has been purged, node left! [ 874.935863][ T144] tipc: TX() has been purged, node left! [ 874.949771][ T144] tipc: TX() has been purged, node left! [ 874.955821][ T144] tipc: TX() has been purged, node left! [ 874.972660][ T144] tipc: TX() has been purged, node left! [ 874.990337][ T144] tipc: TX() has been purged, node left! [ 875.116462][ T144] tipc: TX() has been purged, node left! [ 875.290111][ T144] tipc: TX() has been purged, node left! [ 875.499786][ T144] tipc: TX() has been purged, node left! [ 875.681521][ T144] tipc: TX() has been purged, node left! [ 875.869685][ T144] tipc: TX() has been purged, node left! [ 876.029673][ T144] tipc: TX() has been purged, node left! [ 876.209734][ T144] tipc: TX() has been purged, node left! [ 876.389696][ T144] tipc: TX() has been purged, node left! [ 876.579788][ T144] tipc: TX() has been purged, node left! [ 876.779741][ T144] tipc: TX() has been purged, node left! [ 876.999737][ T144] tipc: TX() has been purged, node left! [ 877.179730][ T144] tipc: TX() has been purged, node left! [ 877.359791][ T144] tipc: TX() has been purged, node left! [ 877.539802][ T144] tipc: TX() has been purged, node left! [ 877.699757][ T144] tipc: TX() has been purged, node left! [ 877.879748][ T144] tipc: TX() has been purged, node left! [ 878.039707][ T144] tipc: TX() has been purged, node left! [ 878.219720][ T144] tipc: TX() has been purged, node left! [ 878.399743][ T144] tipc: TX() has been purged, node left! [ 878.559881][ T144] tipc: TX() has been purged, node left! [ 878.739793][ T144] tipc: TX() has been purged, node left! [ 878.909764][ T144] tipc: TX() has been purged, node left! [ 879.119741][ T144] tipc: TX() has been purged, node left! [ 879.299805][ T144] tipc: TX() has been purged, node left! [ 879.489747][ T144] tipc: TX() has been purged, node left! [ 879.669822][ T144] tipc: TX() has been purged, node left! [ 879.839784][ T144] tipc: TX() has been purged, node left! [ 880.060342][ T144] tipc: TX() has been purged, node left! [ 880.250079][ T144] tipc: TX() has been purged, node left! [ 880.419758][ T144] tipc: TX() has been purged, node left! [ 880.619885][ T144] tipc: TX() has been purged, node left! [ 880.809843][ T144] tipc: TX() has been purged, node left! [ 880.989859][ T144] tipc: TX() has been purged, node left! [ 881.169827][ T144] tipc: TX() has been purged, node left! [ 881.359779][ T144] tipc: TX() has been purged, node left! [ 881.519911][ T144] tipc: TX() has been purged, node left! [ 881.709754][ T144] tipc: TX() has been purged, node left! [ 881.879746][ T144] tipc: TX() has been purged, node left! [ 882.049747][ T144] tipc: TX() has been purged, node left! [ 882.250262][ T144] tipc: TX() has been purged, node left! [ 882.449832][ T144] tipc: TX() has been purged, node left! [ 882.679795][ T144] tipc: TX() has been purged, node left! [ 882.889932][ T144] tipc: TX() has been purged, node left! [ 883.089806][ T144] tipc: TX() has been purged, node left! [ 883.260825][ T144] tipc: TX() has been purged, node left! [ 883.439821][ T144] tipc: TX() has been purged, node left! [ 883.599823][ T144] tipc: TX() has been purged, node left! [ 883.799894][ T144] tipc: TX() has been purged, node left! [ 883.960336][ T144] tipc: TX() has been purged, node left! [ 884.119803][ T144] tipc: TX() has been purged, node left! [ 884.309799][ T144] tipc: TX() has been purged, node left! [ 884.469851][ T144] tipc: TX() has been purged, node left! [ 884.629891][ T144] tipc: TX() has been purged, node left! [ 884.819870][ T144] tipc: TX() has been purged, node left! [ 884.989785][ T144] tipc: TX() has been purged, node left! [ 885.159862][ T144] tipc: TX() has been purged, node left! [ 885.329829][ T144] tipc: TX() has been purged, node left! [ 885.549828][ T144] tipc: TX() has been purged, node left! [ 885.709949][ T144] tipc: TX() has been purged, node left! [ 885.899847][ T144] tipc: TX() has been purged, node left! [ 886.071743][ T144] tipc: TX() has been purged, node left! [ 886.249920][ T144] tipc: TX() has been purged, node left! [ 886.419803][ T144] tipc: TX() has been purged, node left! [ 1026.009911][ T1145] INFO: task syz-executor.3:27569 blocked for more than 143 seconds. [ 1026.018143][ T1145] Not tainted 5.7.0-rc6-syzkaller #0 [ 1026.039720][ T1145] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1026.048456][ T1145] syz-executor.3 D25200 27569 7369 0xa0024006 [ 1026.069683][ T1145] Call Trace: [ 1026.073061][ T1145] ? __schedule+0x937/0x1ff0 [ 1026.090452][ T1145] ? rwsem_down_write_slowpath+0x90a/0xf90 [ 1026.096330][ T1145] ? __sched_text_start+0x8/0x8 [ 1026.109706][ T1145] ? schedule+0xd0/0x2a0 [ 1026.113998][ T1145] ? rwsem_down_write_slowpath+0x706/0xf90 [ 1026.120300][ T1145] ? rwsem_mark_wake+0x8d0/0x8d0 [ 1026.125285][ T1145] ? lock_acquire+0x1f2/0x8f0 [ 1026.130492][ T1145] ? unregister_netdevice_notifier+0x1e/0x170 [ 1026.136688][ T1145] ? lock_release+0x800/0x800 [ 1026.142053][ T1145] ? __sock_release+0x280/0x280 [ 1026.147627][ T1145] ? down_write+0x137/0x150 [ 1026.152816][ T1145] ? down_write+0xb2/0x150 [ 1026.157363][ T1145] ? down_write+0x137/0x150 [ 1026.163395][ T1145] ? __down_timeout+0x2d0/0x2d0 [ 1026.169470][ T1145] ? unregister_netdevice_notifier+0x1e/0x170 [ 1026.176759][ T1145] ? __sock_release+0x280/0x280 [ 1026.182591][ T1145] ? raw_release+0x53/0x730 [ 1026.187118][ T1145] ? fcntl_setlk+0xcc0/0xcc0 [ 1026.193154][ T1145] ? __sock_release+0x280/0x280 [ 1026.198063][ T1145] ? __sock_release+0xcd/0x280 [ 1026.204644][ T1145] ? sock_close+0x18/0x20 [ 1026.213125][ T1145] ? __fput+0x33e/0x880 [ 1026.218429][ T1145] ? task_work_run+0xf4/0x1b0 [ 1026.227037][ T1145] ? do_exit+0xb34/0x2dd0 [ 1026.232387][ T1145] ? find_held_lock+0x2d/0x110 [ 1026.238278][ T1145] ? mm_update_next_owner+0x7a0/0x7a0 [ 1026.245408][ T1145] ? lock_downgrade+0x840/0x840 [ 1026.251671][ T1145] ? do_group_exit+0x125/0x340 [ 1026.257636][ T1145] ? get_signal+0x47b/0x24e0 [ 1026.264983][ T1145] ? find_held_lock+0x2d/0x110 [ 1026.270879][ T1145] ? do_signal+0x81/0x2240 [ 1026.276375][ T1145] ? lock_downgrade+0x840/0x840 [ 1026.282836][ T1145] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1026.291135][ T1145] ? get_sigframe.isra.0+0x730/0x730 [ 1026.296539][ T1145] ? __fd_install+0x1e6/0x600 [ 1026.306504][ T1145] ? __sys_socket+0x16d/0x200 [ 1026.312239][ T1145] ? move_addr_to_kernel+0x70/0x70 [ 1026.318302][ T1145] ? exit_to_usermode_loop+0x26c/0x360 [ 1026.327483][ T1145] ? do_fast_syscall_32+0xbef/0xe90 [ 1026.334446][ T1145] ? entry_SYSENTER_compat+0x70/0x7f [ 1026.340957][ T1145] [ 1026.340957][ T1145] Showing all locks held in the system: [ 1026.348783][ T1145] 3 locks held by kworker/u4:3/144: [ 1026.355834][ T1145] 1 lock held by khungtaskd/1145: [ 1026.361973][ T1145] #0: ffffffff899bea80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1026.373454][ T1145] 1 lock held by in:imklog/6714: [ 1026.379530][ T1145] #0: ffff88809d51de30 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1026.389079][ T1145] 2 locks held by agetty/6731: [ 1026.396333][ T1145] #0: ffff888094b6c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1026.407518][ T1145] #1: ffffc900011242e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 1026.419256][ T1145] 1 lock held by syz-fuzzer/7037: [ 1026.425610][ T1145] #0: ffff8880ae637998 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x233/0x1ff0 [ 1026.438370][ T1145] 2 locks held by syz-executor.3/27569: [ 1026.446438][ T1145] #0: ffff888033b5fc90 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 1026.458549][ T1145] #1: ffffffff8a57aaf0 (pernet_ops_rwsem){++++}-{3:3}, at: unregister_netdevice_notifier+0x1e/0x170 [ 1026.471033][ T1145] [ 1026.473443][ T1145] ============================================= [ 1026.473443][ T1145] [ 1026.483787][ T1145] NMI backtrace for cpu 1 [ 1026.488201][ T1145] CPU: 1 PID: 1145 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 1026.496484][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.506546][ T1145] Call Trace: [ 1026.509863][ T1145] dump_stack+0x188/0x20d [ 1026.514217][ T1145] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1026.519428][ T1145] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1026.525091][ T1145] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 1026.531076][ T1145] watchdog+0xa8c/0x1010 [ 1026.535328][ T1145] ? reset_hung_task_detector+0x30/0x30 [ 1026.540875][ T1145] kthread+0x388/0x470 [ 1026.544948][ T1145] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1026.550686][ T1145] ret_from_fork+0x24/0x30 [ 1026.555376][ T1145] Sending NMI from CPU 1 to CPUs 0: [ 1026.561175][ C0] NMI backtrace for cpu 0 [ 1026.561182][ C0] CPU: 0 PID: 19168 Comm: kworker/u4:1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1026.561188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.561192][ C0] Workqueue: bat_events batadv_nc_worker [ 1026.561200][ C0] RIP: 0010:__lock_acquire+0xe1e/0x4c50 [ 1026.561210][ C0] Code: f3 8e 0a e9 94 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 7b 31 00 00 49 81 3e 80 84 bd 8b <0f> 84 bd f2 ff ff 83 fe 01 0f 87 c5 f2 ff ff 48 b8 00 00 00 00 00 [ 1026.561214][ C0] RSP: 0018:ffffc90017a979e0 EFLAGS: 00000006 [ 1026.561222][ C0] RAX: dffffc0000000000 RBX: ffff8880a2e76000 RCX: 0000000000000000 [ 1026.561227][ C0] RDX: 1ffff1100b0190bb RSI: 0000000000000000 RDI: 0000000000000001 [ 1026.561232][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1026.561237][ C0] R10: ffffffff8a8992c7 R11: fffffbfff1513258 R12: ffff8880a2e76000 [ 1026.561242][ C0] R13: 0000000000000000 R14: ffff8880580c85d8 R15: 0000000000000000 [ 1026.561248][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1026.561252][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.561257][ C0] CR2: 00007fddc27ef000 CR3: 00000000a660c000 CR4: 00000000001426f0 [ 1026.561263][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.561268][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1026.561271][ C0] Call Trace: [ 1026.561275][ C0] ? __lock_acquire+0xcbb/0x4c50 [ 1026.561279][ C0] ? mark_held_locks+0xe0/0xe0 [ 1026.561283][ C0] ? check_usage_backwards+0x341/0x4e0 [ 1026.561286][ C0] lock_acquire+0x1f2/0x8f0 [ 1026.561290][ C0] ? batadv_nc_purge_paths+0xdf/0x380 [ 1026.561294][ C0] ? print_usage_bug+0x240/0x240 [ 1026.561298][ C0] ? lock_release+0x800/0x800 [ 1026.561301][ C0] ? lock_downgrade+0x840/0x840 [ 1026.561305][ C0] ? mark_held_locks+0x9f/0xe0 [ 1026.561309][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 1026.561314][ C0] ? batadv_nc_purge_orig_nc_nodes+0x260/0x260 [ 1026.561317][ C0] _raw_spin_lock_bh+0x2f/0x40 [ 1026.561321][ C0] ? batadv_nc_purge_paths+0xdf/0x380 [ 1026.561325][ C0] batadv_nc_purge_paths+0xdf/0x380 [ 1026.561329][ C0] batadv_nc_worker+0x294/0x760 [ 1026.561332][ C0] process_one_work+0x965/0x16a0 [ 1026.561336][ C0] ? lock_release+0x800/0x800 [ 1026.561340][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 1026.561343][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1026.561347][ C0] worker_thread+0x96/0xe20 [ 1026.561351][ C0] ? process_one_work+0x16a0/0x16a0 [ 1026.561354][ C0] kthread+0x388/0x470 [ 1026.561358][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1026.561362][ C0] ret_from_fork+0x24/0x30 [ 1026.563949][ T1145] Kernel panic - not syncing: hung_task: blocked tasks [ 1026.832350][ T1145] CPU: 1 PID: 1145 Comm: khungtaskd Not tainted 5.7.0-rc6-syzkaller #0 [ 1026.840585][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.851086][ T1145] Call Trace: [ 1026.854412][ T1145] dump_stack+0x188/0x20d [ 1026.858753][ T1145] panic+0x2e3/0x75c [ 1026.862658][ T1145] ? add_taint.cold+0x16/0x16 [ 1026.867344][ T1145] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1026.872986][ T1145] ? preempt_schedule_thunk+0x16/0x18 [ 1026.878373][ T1145] ? watchdog+0xa8c/0x1010 [ 1026.882802][ T1145] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 1026.888973][ T1145] watchdog+0xa9d/0x1010 [ 1026.893246][ T1145] ? reset_hung_task_detector+0x30/0x30 [ 1026.898794][ T1145] kthread+0x388/0x470 [ 1026.902866][ T1145] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1026.908589][ T1145] ret_from_fork+0x24/0x30 [ 1026.914014][ T1145] Kernel Offset: disabled [ 1026.918367][ T1145] Rebooting in 86400 seconds..