14647ae5cca0d116051d9bb67aa6580ac6bc140f104eb923ed08ad918002f3d58f4568cfc69250865ac6e7dc137cddad3335bbe2286fe93ebb278f33ba14d53f4ea8074fdcc79f471c925450a63"], 0x38}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c00100002000000125bd7000fedbdf25000000000000000000000000ff0100000000000000000000000000014e230fff4e2300090200a0fc06000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8091}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0x80, 0x0, 0x89, 0x0, r5}, {0x100000000, 0x4, 0x2, 0x4fe9674f, 0x0, 0x3, 0x4}, {0x80000000, 0xfff, 0x7, 0x1000}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x5, 0x4bc, 0x800}}, 0xe8) r6 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="71eb", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee01}}}], 0x20}, 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)}}, {{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="fa122551c7f3f82fa5b8a477a5243463c0c5183f9a003b7bb8f41f63a07a49878a2f20ae27a336ed7a7c6588a90a6e7ba9833146fe3ef8c57c16b4b247c1095f6560f1900714a26853981b8e3db0859ffde01cdc297abc6286c04804537de2ac3238c58de750e719bb2680d4698f4997b5bdb329d72f6ceb2edf2e1444e5f419e3256ba7080789a0b90cfb537cfa57ae4ac25711470ffa40c6a62b680dd831c669aacf84f0dcaae35bfae89b12a70493939584842bdb89289cdca20e01a57fdf7f40c8dc8e3aa71ea2f273e2da18928eeb77cae7631b2e497df24b4c1287c61ef31e", 0xe2}, {&(0x7f00000000c0)='S?o', 0x3}, {&(0x7f00000002c0)="2a7b192e032ccfa8e96f9cd636a70b882bfaedd47ffd91e8b26bc0b1da55c8", 0x1f}, {&(0x7f0000000300)="7f3faf11cb711cd7560c7d4653f8c44b4b19d87eab24354831b37a7466884ef32f59c476964c15afcbeada20eb46db61376102d51866ac7cb60051b949dd5cb554a189d8fd835461e4a2b02bc8d8bf59ef179e67b80bc1fcd0e590418baa5509b7da5279b86f68d7b5a5baaf559f3617e4182125dca1d3d4d96d0f01a3e2d02ac7f633b80561ef8b591de75d333ebda861d023d7fd3e3fef0d8d98b57926064ac7bea16b650e2b85", 0xa8}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000c144d1eeffffff7f000000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20040050}}, {{&(0x7f0000000f00)=@abs={0x97139046407ee765, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000001240)="e54ae32cfffde115a1a4d170b9f9121ccf521927c987bc46393d625aae4a2112e36b05c313bbc665568ed022c50bf008c0ec619dc23a37ac1608335e28c864d5841fb1398295a83d70da573c4b73ac60a03aaf38f67f04c6cb8e7ea9c15dc5fe54518e6e53ed0624cb9b853b43e04b5bfd8cf6340232322f2c744f20cab599364f3a65903bf36c925dc2a907b1e31f403ade5e40f0c58c94ad66b9f28ed461ee743de8fb3954bc20e4cd0208c70d95620575bf2d1e4df5b62cd9b85cea93d5bcf989be9a55141ee1ae945430a0b158efd3e4adbfb084", 0xd6}], 0x1, &(0x7f0000001380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}], 0x28, 0x800}}], 0x3, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000009c0)={{0x4, 0x6, 0x7c, 0x6, 'syz1\x00', 0x8000}, 0x2, 0x4, 0x9, 0x0, 0x4, 0x200, 'syz1\x00', &(0x7f0000000980)=['[\x00', '/dev/iommu\x00', 'netdevsim\x00', 'netdevsim'], 0x20}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sample_threshold\x00', r0}, 0x10) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x50b202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000004c0)=""/29, 0x1d, 0x0, &(0x7f0000000500)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x16, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7fc0000000000008500000083000000bf09000000000000550901000000000095000000000000001800000001000000000000000e00000017120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf910000"], &(0x7f0000000400)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x49, 0xc, 0x5}, 0x10, r12, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x1, 0xc, 0x5}], 0x10, 0x3ff}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x88e99ca774e0ac82, 0x16, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x730, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x1, 0x2, 0x0, 0x9, 0xffffffffffffffc0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x1, 0x0, 0x0, 0x7, 0x50}, @call={0x85, 0x0, 0x0, 0x78}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x55, r11, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r0, 0x5, 0x0, &(0x7f00000004c0)=[{0x1, 0x1, 0xe, 0x5}, {0x8, 0x1, 0xc, 0xb}, {0x3, 0x2, 0x9, 0x6}, {0x0, 0x5, 0x7, 0xc}, {0x2, 0x1, 0x4, 0xc}]}, 0x90) ioctl$IOMMU_IOAS_COPY$syz(r9, 0x3b83, &(0x7f0000000140)={0x28, 0x0, 0x0, r10, 0x373e00}) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async) r13 = socket$pptp(0x18, 0x1, 0x2) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x134, r14, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40004}, 0x24000801) ioctl$PPPIOCSFLAGS(r13, 0x40047459, &(0x7f0000000180)=0x8000104) 13:55:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:55:37 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:37 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x0) [ 754.174223][T29925] usb 4-1: USB disconnect, device number 45 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x3d8e76919652c6f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r3}) r4 = dup3(r0, r0, 0x80000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x3d8e76919652c6f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r3}) r4 = dup3(r0, r0, 0x80000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x3d8e76919652c6f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f00000001c0)={0x8, r3}) (async) r4 = dup3(r0, r0, 0x80000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x7fffffffffffffff}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x7fffffffffffffff}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x7fffffffffffffff}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r2, 0x373dff, 0x0, 0x0, 0x2dd41a}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x6, r3, r3, 0x7, 0x2000009}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r2, 0x373dff, 0x0, 0x0, 0x2dd41a}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x6, r3, r3, 0x7, 0x2000009}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r2, 0x373dff, 0x0, 0x0, 0x2dd41a}) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x6, r3, r3, 0x7, 0x2000009}) 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)=r3) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 754.524144][ T5137] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 754.532513][ T5135] usb 2-1: new high-speed USB device number 43 using dummy_hcd 13:55:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)=r3) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)=r3) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x7, r1, 0x0, &(0x7f0000000180)="52a9b03f340ff58e8417654ad31129e4deb9e11cb06b3368dd8768325154370d165ab312ed432e593784f685f984f691950bfc16583d7dedada79bd696d961cf6989ac3617859d9e4236098256dc769ecda37221d39cc81998863a451eb9a88cee36b39517cf1378d1c8fcf9eda615eb97c3fb6c27b5ba4413a232e03fd484c5546d57ee061e2b7169cfaaf6deb5e4c34d91dcbe60c873dfa6f123d907e31c7196497890f38690661c25c0902a9396e30a5525171a0ed02338008a", 0xbb, 0x7}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000140)={0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x179f7e, 0x1d423f}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x1916e8, 0x0, 0x0, 0x2}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x7, r1, 0x0, &(0x7f0000000180)="52a9b03f340ff58e8417654ad31129e4deb9e11cb06b3368dd8768325154370d165ab312ed432e593784f685f984f691950bfc16583d7dedada79bd696d961cf6989ac3617859d9e4236098256dc769ecda37221d39cc81998863a451eb9a88cee36b39517cf1378d1c8fcf9eda615eb97c3fb6c27b5ba4413a232e03fd484c5546d57ee061e2b7169cfaaf6deb5e4c34d91dcbe60c873dfa6f123d907e31c7196497890f38690661c25c0902a9396e30a5525171a0ed02338008a", 0xbb, 0x7}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000140)={0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x179f7e, 0x1d423f}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x1916e8, 0x0, 0x0, 0x2}) [ 754.659934][T29925] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 754.667753][ T27] usb 1-1: new high-speed USB device number 34 using dummy_hcd 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x7, r1, 0x0, &(0x7f0000000180)="52a9b03f340ff58e8417654ad31129e4deb9e11cb06b3368dd8768325154370d165ab312ed432e593784f685f984f691950bfc16583d7dedada79bd696d961cf6989ac3617859d9e4236098256dc769ecda37221d39cc81998863a451eb9a88cee36b39517cf1378d1c8fcf9eda615eb97c3fb6c27b5ba4413a232e03fd484c5546d57ee061e2b7169cfaaf6deb5e4c34d91dcbe60c873dfa6f123d907e31c7196497890f38690661c25c0902a9396e30a5525171a0ed02338008a", 0xbb, 0x7}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000140)={0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x179f7e, 0x1d423f}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x1916e8, 0x0, 0x0, 0x2}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) [ 754.754098][ T5137] usb 3-1: device descriptor read/64, error -71 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) [ 754.886188][ T27] usb 1-1: device descriptor read/64, error -71 [ 754.934203][ T5135] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 754.953421][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 754.973289][ T5135] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) [ 754.982715][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.999549][ T5135] usb 2-1: config 0 descriptor?? [ 755.035155][ T5137] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 755.058058][ T5135] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 755.074348][T29925] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 755.091416][T29925] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 755.110308][T29925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.119516][T29925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:55:38 executing program 4: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) [ 755.141286][T29925] usb 4-1: config 0 descriptor?? [ 755.164473][ T27] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 755.196711][T29925] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x1, 0x9f}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) [ 755.233909][ T5137] usb 3-1: device descriptor read/64, error -71 [ 755.269845][T29925] usb 2-1: USB disconnect, device number 43 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x1, 0x9f}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x1, 0x9f}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x1, 0x9f}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) (rerun: 64) [ 755.365239][ T27] usb 1-1: device descriptor read/64, error -71 [ 755.372017][ T5137] usb usb3-port1: attempt power cycle 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) lseek(r0, 0x1c, 0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x9, 0x3}) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) lseek(r0, 0x1c, 0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x9, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) lseek(r0, 0x1c, 0x7) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x9, 0x3}) (async) 13:55:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) lseek(r0, 0x1c, 0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x9, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) lseek(r0, 0x1c, 0x7) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x9, 0x3}) (async) [ 755.495801][ T27] usb usb1-port1: attempt power cycle [ 755.807627][ T5137] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 755.914587][ T5137] usb 3-1: device descriptor read/8, error -71 [ 755.923027][ T27] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 756.014605][ T27] usb 1-1: device descriptor read/8, error -71 [ 756.193976][ T5137] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 756.287363][ T27] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 756.295022][ T5137] usb 3-1: device descriptor read/8, error -71 [ 756.383970][ T27] usb 1-1: device descriptor read/8, error -71 [ 756.414352][ T5137] usb usb3-port1: unable to enumerate USB device [ 756.514306][ T27] usb usb1-port1: unable to enumerate USB device 13:55:40 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x5, 0x0, &(0x7f0000000100)=[{0x7, 0x8}, {0xd1, 0x8}, {0x1ff, 0x8}, {0x3, 0xf3}, {0x4, 0x7}]}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r5, 0x22233c, 0x2, 0x2, 0x3161ce}) 13:55:40 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:40 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x0) 13:55:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x5}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x5, 0x0, &(0x7f0000000100)=[{0x7, 0x8}, {0xd1, 0x8}, {0x1ff, 0x8}, {0x3, 0xf3}, {0x4, 0x7}]}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r5, 0x22233c, 0x2, 0x2, 0x3161ce}) [ 757.286009][ T5137] usb 4-1: USB disconnect, device number 46 [ 757.292030][ T428] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x5, 0x0, &(0x7f0000000100)=[{0x7, 0x8}, {0xd1, 0x8}, {0x1ff, 0x8}, {0x3, 0xf3}, {0x4, 0x7}]}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r5}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r5, 0x22233c, 0x2, 0x2, 0x3161ce}) [ 757.396900][ T437] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x40373e00}) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x40373e00}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x40373e00}) (async) [ 757.440565][ T440] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x40373e00}) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) 13:55:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) 13:55:41 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10008000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:41 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10008000) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 757.624170][ T27] usb 2-1: new high-speed USB device number 44 using dummy_hcd 13:55:41 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10008000) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x100}, {0x4f26, 0x7ff}]}) [ 757.694386][T32230] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 757.734071][ T5137] usb 4-1: new high-speed USB device number 47 using dummy_hcd 13:55:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x100}, {0x4f26, 0x7ff}]}) 13:55:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x100}, {0x4f26, 0x7ff}]}) [ 757.744068][ T5222] usb 3-1: new high-speed USB device number 30 using dummy_hcd 13:55:41 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x3f, 0xc5, 0x0, 0x7}, {0x0, 0x7f, 0xff, 0xe9a6}, {0x800, 0xc1, 0x5, 0x101}, {0x0, 0x2, 0x9, 0x10001}, {0x4, 0x0, 0x6, 0x200}, {0x8, 0x40, 0x4, 0x2}, {0x8, 0x3, 0x1, 0xfffffff9}, {0x800, 0x3, 0x34, 0x408}]}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) dup3(r1, r0, 0x0) 13:55:41 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x3f, 0xc5, 0x0, 0x7}, {0x0, 0x7f, 0xff, 0xe9a6}, {0x800, 0xc1, 0x5, 0x101}, {0x0, 0x2, 0x9, 0x10001}, {0x4, 0x0, 0x6, 0x200}, {0x8, 0x40, 0x4, 0x2}, {0x8, 0x3, 0x1, 0xfffffff9}, {0x800, 0x3, 0x34, 0x408}]}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) dup3(r1, r0, 0x0) 13:55:41 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x3f, 0xc5, 0x0, 0x7}, {0x0, 0x7f, 0xff, 0xe9a6}, {0x800, 0xc1, 0x5, 0x101}, {0x0, 0x2, 0x9, 0x10001}, {0x4, 0x0, 0x6, 0x200}, {0x8, 0x40, 0x4, 0x2}, {0x8, 0x3, 0x1, 0xfffffff9}, {0x800, 0x3, 0x34, 0x408}]}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) dup3(r1, r0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x3f, 0xc5, 0x0, 0x7}, {0x0, 0x7f, 0xff, 0xe9a6}, {0x800, 0xc1, 0x5, 0x101}, {0x0, 0x2, 0x9, 0x10001}, {0x4, 0x0, 0x6, 0x200}, {0x8, 0x40, 0x4, 0x2}, {0x8, 0x3, 0x1, 0xfffffff9}, {0x800, 0x3, 0x34, 0x408}]}, 0x10) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) dup3(r1, r0, 0x0) (async) 13:55:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f0000000180)={0x8, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f0000000180)={0x8, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 757.955621][ T482] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 757.964120][ T5222] usb 3-1: device descriptor read/64, error -71 [ 757.984247][ T27] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 758.005257][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 758.019872][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.030217][ T485] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 758.038362][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.048170][ T485] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 758.056192][ T27] usb 2-1: config 0 descriptor?? [ 758.062505][ T485] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 758.073214][ T485] iommufd_mock iommufd_mock4: Adding to iommu group 3 [ 758.083690][ T485] iommufd_mock iommufd_mock5: Adding to iommu group 4 [ 758.092901][ T485] iommufd_mock iommufd_mock6: Adding to iommu group 5 [ 758.102101][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 758.114206][T32230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.120426][ T5137] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 758.133396][T32230] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.136307][ T5137] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 758.149612][T32230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.159789][ T485] iommufd_mock iommufd_mock7: Adding to iommu group 6 [ 758.176948][ T485] iommufd_mock iommufd_mock8: Adding to iommu group 7 [ 758.180028][T32230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.184223][ T5137] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.199243][T32230] usb 1-1: config 0 descriptor?? [ 758.211177][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.221451][ T485] iommufd_mock iommufd_mock9: Adding to iommu group 8 [ 758.230411][ T485] iommufd_mock iommufd_mock10: Adding to iommu group 9 [ 758.230485][ T5137] usb 4-1: config 0 descriptor?? [ 758.237638][ T5222] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 758.258100][ T485] iommufd_mock iommufd_mock11: Adding to iommu group 10 [ 758.272145][ T485] iommufd_mock iommufd_mock12: Adding to iommu group 11 [ 758.276358][ T5137] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 758.287847][ T485] iommufd_mock iommufd_mock13: Adding to iommu group 12 [ 758.305451][ T485] iommufd_mock iommufd_mock14: Adding to iommu group 13 [ 758.306133][T32762] usb 2-1: USB disconnect, device number 44 [ 758.316479][ T485] iommufd_mock iommufd_mock15: Adding to iommu group 14 [ 758.342430][ T485] iommufd_mock iommufd_mock16: Adding to iommu group 15 [ 758.354499][ T485] iommufd_mock iommufd_mock17: Adding to iommu group 16 [ 758.362528][ T485] iommufd_mock iommufd_mock18: Adding to iommu group 17 [ 758.370926][ T485] iommufd_mock iommufd_mock19: Adding to iommu group 18 [ 758.387091][ T485] iommufd_mock iommufd_mock20: Adding to iommu group 19 [ 758.400482][ T485] iommufd_mock iommufd_mock21: Adding to iommu group 20 [ 758.411363][ T485] iommufd_mock iommufd_mock22: Adding to iommu group 21 [ 758.427110][ T485] iommufd_mock iommufd_mock23: Adding to iommu group 22 [ 758.438173][ T485] iommufd_mock iommufd_mock24: Adding to iommu group 23 [ 758.445688][ T5222] usb 3-1: device descriptor read/64, error -71 [ 758.458522][ T485] iommufd_mock iommufd_mock25: Adding to iommu group 24 [ 758.473646][ T485] iommufd_mock iommufd_mock26: Adding to iommu group 25 [ 758.484931][ T485] iommufd_mock iommufd_mock27: Adding to iommu group 26 [ 758.492849][ T485] iommufd_mock iommufd_mock28: Adding to iommu group 27 [ 758.503307][T32230] usb 1-1: string descriptor 0 read error: -71 [ 758.523261][T32230] usb 1-1: USB disconnect, device number 38 [ 758.529917][ T485] iommufd_mock iommufd_mock29: Adding to iommu group 28 [ 758.538574][ T485] iommufd_mock iommufd_mock30: Adding to iommu group 29 [ 758.552010][ T485] iommufd_mock iommufd_mock31: Adding to iommu group 30 [ 758.560950][ T485] iommufd_mock iommufd_mock32: Adding to iommu group 31 [ 758.569078][ T485] iommufd_mock iommufd_mock33: Adding to iommu group 32 [ 758.578194][ T5222] usb usb3-port1: attempt power cycle [ 758.585066][ T485] iommufd_mock iommufd_mock34: Adding to iommu group 33 [ 758.597389][ T485] iommufd_mock iommufd_mock35: Adding to iommu group 34 [ 758.606827][ T485] iommufd_mock iommufd_mock36: Adding to iommu group 35 [ 758.620012][ T485] iommufd_mock iommufd_mock37: Adding to iommu group 36 [ 758.631384][ T485] iommufd_mock iommufd_mock38: Adding to iommu group 37 [ 758.647701][ T485] iommufd_mock iommufd_mock39: Adding to iommu group 38 [ 758.658654][ T485] iommufd_mock iommufd_mock40: Adding to iommu group 39 [ 758.669225][ T485] iommufd_mock iommufd_mock41: Adding to iommu group 40 [ 758.677804][ T485] iommufd_mock iommufd_mock42: Adding to iommu group 41 [ 758.686309][ T485] iommufd_mock iommufd_mock43: Adding to iommu group 42 [ 758.695080][ T485] iommufd_mock iommufd_mock44: Adding to iommu group 43 [ 758.703311][ T485] iommufd_mock iommufd_mock45: Adding to iommu group 44 [ 758.711706][ T485] iommufd_mock iommufd_mock46: Adding to iommu group 45 [ 758.720162][ T485] iommufd_mock iommufd_mock47: Adding to iommu group 46 [ 758.733446][ T485] iommufd_mock iommufd_mock48: Adding to iommu group 47 [ 758.742057][ T485] iommufd_mock iommufd_mock49: Adding to iommu group 48 [ 758.752764][ T485] iommufd_mock iommufd_mock50: Adding to iommu group 49 [ 758.763102][ T485] iommufd_mock iommufd_mock51: Adding to iommu group 50 [ 758.773128][ T485] iommufd_mock iommufd_mock52: Adding to iommu group 51 [ 758.783168][ T485] iommufd_mock iommufd_mock53: Adding to iommu group 52 [ 758.794433][ T485] iommufd_mock iommufd_mock54: Adding to iommu group 53 [ 758.803998][ T485] iommufd_mock iommufd_mock55: Adding to iommu group 54 [ 758.813664][ T485] iommufd_mock iommufd_mock56: Adding to iommu group 55 13:55:42 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) [ 758.824426][ T485] iommufd_mock iommufd_mock57: Adding to iommu group 56 [ 758.841120][ T485] iommufd_mock iommufd_mock58: Adding to iommu group 57 13:55:42 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r2, 0x3b80, &(0x7f0000000180)={0x8, r3}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 759.015647][ T5222] usb 3-1: new high-speed USB device number 32 using dummy_hcd 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) [ 759.069014][ T494] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) (async) 13:55:42 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r0, 0x373e00}) [ 759.144190][ T5222] usb 3-1: device descriptor read/8, error -71 [ 759.174005][T32762] usb 2-1: new high-speed USB device number 45 using dummy_hcd 13:55:42 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r0, 0x373e00}) 13:55:42 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r0, 0x373e00}) 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:55:42 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) [ 759.314654][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 759.413944][ T5222] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 759.506596][ T5222] usb 3-1: device descriptor read/8, error -71 [ 759.548094][T32762] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 759.559215][T32762] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 759.572561][T32762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.582039][T32762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.594633][T32762] usb 2-1: config 0 descriptor?? [ 759.624419][ T5222] usb usb3-port1: unable to enumerate USB device [ 759.639223][T32762] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 759.694076][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.704334][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.713278][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.723467][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.739305][ T8] usb 1-1: config 0 descriptor?? [ 759.839172][ T5222] usb 2-1: USB disconnect, device number 45 [ 760.024375][ T8] usb 1-1: string descriptor 0 read error: -71 [ 760.033159][ T8] usb 1-1: USB disconnect, device number 39 13:55:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:55:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) (async) 13:55:43 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:43 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) [ 760.377862][T32762] usb 4-1: USB disconnect, device number 47 13:55:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, r2, 0x0, 0x78, &(0x7f0000000140)="77d8876ba48c80787e771cdef9e9c5d227042e0dadc4a3de1c15795182df5609a4ad2c6d3e969996c0500a7d33b6f699b8204178d09a2cb4fb30c584c1688fbc9ce93feb609afde43a70255b7b48f58d5c27e337f701b500b9e335a631d45bf64223b902760d636805419e45d2fe5003752ef0c96bce2b2c"}) 13:55:43 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:55:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, r2, 0x0, 0x78, &(0x7f0000000140)="77d8876ba48c80787e771cdef9e9c5d227042e0dadc4a3de1c15795182df5609a4ad2c6d3e969996c0500a7d33b6f699b8204178d09a2cb4fb30c584c1688fbc9ce93feb609afde43a70255b7b48f58d5c27e337f701b500b9e335a631d45bf64223b902760d636805419e45d2fe5003752ef0c96bce2b2c"}) 13:55:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x3c, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, r2, 0x0, 0x78, &(0x7f0000000140)="77d8876ba48c80787e771cdef9e9c5d227042e0dadc4a3de1c15795182df5609a4ad2c6d3e969996c0500a7d33b6f699b8204178d09a2cb4fb30c584c1688fbc9ce93feb609afde43a70255b7b48f58d5c27e337f701b500b9e335a631d45bf64223b902760d636805419e45d2fe5003752ef0c96bce2b2c"}) 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x0, r3, r1, 0x373e00}) 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x0, r3, r1, 0x373e00}) 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x0, r3, r1, 0x373e00}) [ 760.744894][ T5222] usb 2-1: new high-speed USB device number 46 using dummy_hcd 13:55:44 executing program 4: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000400)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0xcfd71000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0}) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00, 0x0, 0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000003c0)={0x8, r4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r6}, 0x4) 13:55:44 executing program 4: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000400)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0xcfd71000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0}) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00, 0x0, 0x4}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000003c0)={0x8, r4}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r6}, 0x4) [ 760.814175][ T5137] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 760.825483][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 760.844108][T32762] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 760.853076][ T544] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:44 executing program 4: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000400)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0xcfd71000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0}) (async) r5 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00, 0x0, 0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) (rerun: 64) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f00000003c0)={0x8, r4}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r6}, 0x4) [ 760.900570][ T546] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x1, 0x7}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)={0x8, 0x9, 0x6, 0x745cfe1, 0x6, [{0x93, 0x6, 0x18000000000000, '\x00', 0x3308}, {0x7, 0x0, 0x4, '\x00', 0x2}, {0x7fff, 0x3, 0x0, '\x00', 0x400}, {0x6, 0x6ec, 0x5, '\x00', 0x4}, {0xcd1f, 0x1, 0x2, '\x00', 0x2c00}, {0x5, 0x10000, 0x8001, '\x00', 0x200}]}) r4 = dup(r3) write$binfmt_script(r4, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0xfff}) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf5) [ 760.943225][ T550] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x1, 0x7}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)={0x8, 0x9, 0x6, 0x745cfe1, 0x6, [{0x93, 0x6, 0x18000000000000, '\x00', 0x3308}, {0x7, 0x0, 0x4, '\x00', 0x2}, {0x7fff, 0x3, 0x0, '\x00', 0x400}, {0x6, 0x6ec, 0x5, '\x00', 0x4}, {0xcd1f, 0x1, 0x2, '\x00', 0x2c00}, {0x5, 0x10000, 0x8001, '\x00', 0x200}]}) r4 = dup(r3) write$binfmt_script(r4, 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0xfff}) (async) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf5) 13:55:44 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x1, 0x7}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) (async) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)={0x8, 0x9, 0x6, 0x745cfe1, 0x6, [{0x93, 0x6, 0x18000000000000, '\x00', 0x3308}, {0x7, 0x0, 0x4, '\x00', 0x2}, {0x7fff, 0x3, 0x0, '\x00', 0x400}, {0x6, 0x6ec, 0x5, '\x00', 0x4}, {0xcd1f, 0x1, 0x2, '\x00', 0x2c00}, {0x5, 0x10000, 0x8001, '\x00', 0x200}]}) (async) r4 = dup(r3) write$binfmt_script(r4, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0xfff}) (async) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf5) 13:55:44 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) [ 761.104325][ T5222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.121042][ T5222] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 761.130023][ T563] overlay: Bad value for 'redirect_dir' [ 761.134648][ T5222] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.157117][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.170931][ T5222] usb 2-1: config 0 descriptor?? [ 761.194112][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.205008][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.215481][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.225532][ T564] ======================================================= [ 761.225532][ T564] WARNING: The mand mount option has been deprecated and [ 761.225532][ T564] and is ignored by this kernel. Remove the mand [ 761.225532][ T564] option from the mount to silence this warning. [ 761.225532][ T564] ======================================================= [ 761.263283][ T5222] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 761.270738][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.286698][ T5137] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.297287][T32762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.316361][ T8] usb 3-1: config 0 descriptor?? [ 761.318569][ T5137] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.341559][T32762] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 761.356085][ T5137] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.365453][T32762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.374849][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.382961][T32762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.401252][ T5137] usb 1-1: config 0 descriptor?? [ 761.411183][T32762] usb 4-1: config 0 descriptor?? [ 761.429382][ T5222] usb 2-1: USB disconnect, device number 46 [ 761.477437][T32762] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 761.594138][ T8] usb 3-1: string descriptor 0 read error: -71 [ 761.604297][ T8] usb 3-1: USB disconnect, device number 34 13:55:45 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) (async, rerun: 32) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 64) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async, rerun: 32) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) [ 761.647983][ T563] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 761.675075][ T5137] usb 1-1: string descriptor 0 read error: -71 13:55:45 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) (async, rerun: 32) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) (async) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (rerun: 64) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) [ 761.706729][ T5137] usb 1-1: USB disconnect, device number 40 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0x2b}, 0x16, 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0x2b}, 0x16, 0x2) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:45 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0x2b}, 0x16, 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:55:45 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:55:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000100)={0x8}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 762.274699][ T5137] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 762.394017][T32762] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 762.664390][ T5137] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.675170][ T5137] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 762.689010][ T5137] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.698118][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.714438][ T5137] usb 2-1: config 0 descriptor?? [ 762.756357][ T5137] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 762.784157][T32762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.797586][T32762] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.806881][T32762] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.816666][T32762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.828663][T32762] usb 3-1: config 0 descriptor?? [ 762.957816][ T5137] usb 2-1: USB disconnect, device number 47 [ 763.104161][T32762] usb 3-1: string descriptor 0 read error: -71 [ 763.114285][T32762] usb 3-1: USB disconnect, device number 35 13:55:46 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:46 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000100)={0x8}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 763.419469][ T8] usb 4-1: USB disconnect, device number 48 13:55:46 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:46 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000100)={0x8}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:46 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x288041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18277ab9}) 13:55:46 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:55:46 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x288041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18277ab9}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18277ab9}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x288041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18277ab9}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18277ab9}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pciehp', 0x200400, 0x100) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, r2, 0x0, 0xee, &(0x7f0000000180)="8d463dc629272d2738c57f4875cdfe6e873edc73eac03dfa5dfb321503cf20168f3f6241946ec2b63999073601d5509c04c4115de133326746032192437c253077eb6a750f073b0b1e9b6b53dfeab6060ca439c375d15daa7b5832c9df81a9b1fe4019f9f9483ec812cd40dc5ffe11e5ae0899c2c8c12a8c9beddf50f69f2d39b2eeff43cd56fbf942afd9b71878775eacb4fda342e74727511b7fc6295cc476b2cb791ba562bde2c1fa3f2ae1ecc0b2bcdcb1f507b27bf12fb1ea94685673b46ae7861d97de800b0f44092f4a1f1cce03c176c69f593e2926b343121529f48833720b50e064cacc6273dc6aa7f0", 0x3f}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x0, 0x0, r3, 0x373e00, 0x7f}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pciehp', 0x200400, 0x100) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, r2, 0x0, 0xee, &(0x7f0000000180)="8d463dc629272d2738c57f4875cdfe6e873edc73eac03dfa5dfb321503cf20168f3f6241946ec2b63999073601d5509c04c4115de133326746032192437c253077eb6a750f073b0b1e9b6b53dfeab6060ca439c375d15daa7b5832c9df81a9b1fe4019f9f9483ec812cd40dc5ffe11e5ae0899c2c8c12a8c9beddf50f69f2d39b2eeff43cd56fbf942afd9b71878775eacb4fda342e74727511b7fc6295cc476b2cb791ba562bde2c1fa3f2ae1ecc0b2bcdcb1f507b27bf12fb1ea94685673b46ae7861d97de800b0f44092f4a1f1cce03c176c69f593e2926b343121529f48833720b50e064cacc6273dc6aa7f0", 0x3f}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x0, 0x0, r3, 0x373e00, 0x7f}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pciehp', 0x200400, 0x100) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, r2, 0x0, 0xee, &(0x7f0000000180)="8d463dc629272d2738c57f4875cdfe6e873edc73eac03dfa5dfb321503cf20168f3f6241946ec2b63999073601d5509c04c4115de133326746032192437c253077eb6a750f073b0b1e9b6b53dfeab6060ca439c375d15daa7b5832c9df81a9b1fe4019f9f9483ec812cd40dc5ffe11e5ae0899c2c8c12a8c9beddf50f69f2d39b2eeff43cd56fbf942afd9b71878775eacb4fda342e74727511b7fc6295cc476b2cb791ba562bde2c1fa3f2ae1ecc0b2bcdcb1f507b27bf12fb1ea94685673b46ae7861d97de800b0f44092f4a1f1cce03c176c69f593e2926b343121529f48833720b50e064cacc6273dc6aa7f0", 0x3f}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, r2, 0x0, 0xee, &(0x7f0000000180)="8d463dc629272d2738c57f4875cdfe6e873edc73eac03dfa5dfb321503cf20168f3f6241946ec2b63999073601d5509c04c4115de133326746032192437c253077eb6a750f073b0b1e9b6b53dfeab6060ca439c375d15daa7b5832c9df81a9b1fe4019f9f9483ec812cd40dc5ffe11e5ae0899c2c8c12a8c9beddf50f69f2d39b2eeff43cd56fbf942afd9b71878775eacb4fda342e74727511b7fc6295cc476b2cb791ba562bde2c1fa3f2ae1ecc0b2bcdcb1f507b27bf12fb1ea94685673b46ae7861d97de800b0f44092f4a1f1cce03c176c69f593e2926b343121529f48833720b50e064cacc6273dc6aa7f0", 0x3f}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x0, 0x0, r3, 0x373e00, 0x7f}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x0, 0x0, 0x3c3fab}) [ 763.755377][ T5137] usb 1-1: new high-speed USB device number 41 using dummy_hcd 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x0, 0x0, 0x3c3fab}) [ 763.803960][T32230] usb 2-1: new high-speed USB device number 48 using dummy_hcd 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x0, 0x0, 0x3c3fab}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x0, 0x0, 0x3c3fab}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x101}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) [ 763.855131][ T8] usb 4-1: new high-speed USB device number 49 using dummy_hcd 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x101}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x101}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x101}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) [ 763.924029][T29925] usb 3-1: new high-speed USB device number 36 using dummy_hcd 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x8, 0x1}) 13:55:47 executing program 4: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x8, 0x1}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00, 0x8, 0x1}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xfff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xfff}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xfff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xfff}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) [ 764.154477][ T5137] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 764.164834][T32230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.164888][T32230] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 764.164933][T32230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x518da, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9a35}) [ 764.164957][T32230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.167409][T32230] usb 2-1: config 0 descriptor?? [ 764.189033][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 764.232364][ T5137] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.234309][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.243237][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.265828][T32230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 764.275342][ T5137] usb 1-1: config 0 descriptor?? [ 764.292116][ T670] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x518da, 0x1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9a35}) [ 764.294544][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 764.322426][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.333396][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.358169][ T5137] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 764.359008][ T8] usb 4-1: config 0 descriptor?? [ 764.374147][T29925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.384554][T29925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 764.391458][ T673] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:55:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x518da, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9a35}) [ 764.399360][T29925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.416938][T29925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.430627][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 13:55:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0xffffffffffffffff, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f0000002100)={0x9, 0x50b41049, 0x0, 0x2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) [ 764.461464][T29925] usb 3-1: config 0 descriptor?? [ 764.475807][ T676] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 764.477092][ T5137] usb 2-1: USB disconnect, device number 48 13:55:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0xffffffffffffffff, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f0000002100)={0x9, 0x50b41049, 0x0, 0x2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) 13:55:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0xffffffffffffffff, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f0000002100)={0x9, 0x50b41049, 0x0, 0x2}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) [ 764.556158][ T27] usb 1-1: USB disconnect, device number 41 13:55:48 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:48 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 764.734461][T29925] usb 3-1: string descriptor 0 read error: -71 [ 764.745258][T29925] usb 3-1: USB disconnect, device number 36 13:55:48 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:48 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 765.373967][T29925] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 765.734030][T29925] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 765.744597][T29925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 765.757844][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.767175][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.778686][T29925] usb 1-1: config 0 descriptor?? [ 765.829450][T29925] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 766.030094][T29925] usb 1-1: USB disconnect, device number 42 13:55:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:55:49 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) 13:55:49 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:49 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) [ 766.489528][ T27] usb 4-1: USB disconnect, device number 49 13:55:49 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:49 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x412203, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, 0x0, r1, 0x373e00, 0x4}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x412203, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, 0x0, r1, 0x373e00, 0x4}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x412203, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, 0x0, r1, 0x373e00, 0x4}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, 0x0, r1, 0x373e00, 0x4}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r1, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000300)={0x8, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r1, 0x0, 0x0}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000300)={0x8, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) [ 766.783334][ T717] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.800233][ T717] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.815119][T29925] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 766.850270][ T720] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.859811][ T719] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 766.868107][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r1, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000300)={0x8, r3}) (async) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000300)={0x8, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) [ 766.894103][T32230] usb 1-1: new high-speed USB device number 43 using dummy_hcd 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 766.928432][ T723] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.939288][ T723] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.964295][ T27] usb 4-1: new high-speed USB device number 50 using dummy_hcd 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, 0x0, r1, 0x373e00, 0x0, 0x0, 0x117224}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, r1, 0x5}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, 0x0, r1, 0x373e00, 0x0, 0x0, 0x117224}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, r1, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, 0x0, r1, 0x373e00, 0x0, 0x0, 0x117224}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, r1, 0x5}) (async) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, 0x0, r1, 0x373e00, 0x0, 0x0, 0x117224}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, r1, 0x5}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0xc0, 0x2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0xc0, 0x2}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0xc0, 0x2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) [ 767.194343][T29925] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 767.207426][T29925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 767.221558][T29925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.232099][T29925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.251617][T29925] usb 2-1: config 0 descriptor?? 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x408103, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x4}) [ 767.284264][ T8] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 767.295024][T32230] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 767.307717][T29925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 767.320765][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 767.324077][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.335069][T32230] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 767.356910][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 767.371008][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x408103, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x4}) [ 767.385721][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.390977][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.399536][T32230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.414459][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.424884][ T27] usb 4-1: config 0 descriptor?? [ 767.430996][ T8] usb 3-1: config 0 descriptor?? 13:55:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x408103, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x4}) [ 767.440277][T32230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.458085][T32230] usb 1-1: config 0 descriptor?? [ 767.478949][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 767.505172][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 767.510186][ T27] usb 2-1: USB disconnect, device number 49 [ 767.514497][T32230] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 13:55:50 executing program 4: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "63a440de1cda076d95135ce6e1598e962c50625bfd36054edeaaf0dcc87b058e6fa46177d60e8ef2a323cf37451d1f77e0affdafe552d3af5de3eb92c0b51905b259c38302f6383cd739c0e7365dd596785441df4769a8dcf77e04a2d8d503cff9ec8d7882bdc29e29a113d008284718fffa8bad5ffdc3987112c9e85b5c1b7f06dc40b3a6ebf9cddc76f21b7545c64da55e1a245420d5ac3d742315b92ffe0a79e7f82b035f999a16ece06be97b768521972ef206441df068b306700c9f6b2b0acbe2feaad4a2607cc0a45313edb4726a5b028992e26d4ea764026ba8e600ac4dea15ce8007f56fc07807c979dfd51625558241fbd145bca475b682595b899b", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001100)={{r1, 0x9, 0x8, 0x5, 0x9, 0x200, 0x8, 0x8, 0x4, 0x80, 0x80000001, 0x6, 0x96, 0x4, 0x430e}, 0x8, [0x0]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) 13:55:50 executing program 4: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001100)={{r1, 0x9, 0x8, 0x5, 0x9, 0x200, 0x8, 0x8, 0x4, 0x80, 0x80000001, 0x6, 0x96, 0x4, 0x430e}, 0x8, [0x0]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) 13:55:51 executing program 4: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001100)={{r1, 0x9, 0x8, 0x5, 0x9, 0x200, 0x8, 0x8, 0x4, 0x80, 0x80000001, 0x6, 0x96, 0x4, 0x430e}, 0x8, [0x0]}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r3, 0x373e00}) 13:55:51 executing program 4: r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsmount(r0, 0x1, 0x78) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xbe14) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:55:51 executing program 4: r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsmount(r0, 0x1, 0x78) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xbe14) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) fsmount(r0, 0x1, 0x78) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xbe14) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) [ 767.708112][ T5135] usb 1-1: USB disconnect, device number 43 [ 767.709477][T32230] usb 3-1: USB disconnect, device number 37 13:55:51 executing program 4: r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsmount(r0, 0x1, 0x78) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xbe14) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:55:51 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) 13:55:52 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) 13:55:52 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) 13:55:52 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:52 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 769.565802][ T8] usb 4-1: USB disconnect, device number 50 13:55:53 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) (async) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) (async) 13:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 13:55:53 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x24048814, 0x0, 0x4) 13:55:53 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x400f0, 0x0, 0xfffffffffffffc1a) 13:55:53 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x20) 13:55:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1}}], 0x2, 0x0, &(0x7f0000002d80)={0x0, 0x3938700}) [ 769.907399][T32230] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 769.914086][ T27] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 769.944502][ T5135] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 770.034943][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 770.174072][T29048] Bluetooth: hci3: command 0x0406 tx timeout [ 770.274258][T32230] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 770.285478][T32230] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 770.298832][T32230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.311022][T32230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.321028][T32230] usb 3-1: config 0 descriptor?? [ 770.334361][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.344695][ T5135] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 770.355059][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 770.366918][T32230] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 770.369208][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 770.388738][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.398058][ T5135] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.404629][ T8] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 770.417344][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.425682][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.436726][ T5135] usb 2-1: config 0 descriptor?? [ 770.444391][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 770.452990][ T27] usb 1-1: config 0 descriptor?? [ 770.464388][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.476206][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.486765][ T8] usb 4-1: config 0 descriptor?? [ 770.503562][ T5135] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 770.527977][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 770.528250][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 770.585884][ T8] usb 3-1: USB disconnect, device number 38 13:55:54 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) 13:55:54 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000002c0), 0xfe12) [ 770.707365][ T5135] usb 2-1: USB disconnect, device number 50 [ 770.732700][ T27] usb 1-1: USB disconnect, device number 44 13:55:54 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x2400c805, 0x0, 0xfffffffffffffddb) 13:55:54 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x13) 13:55:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4e89635017fab7d5, 0x0, 0x0) 13:55:54 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x21) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x8840, 0x4) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x18a40, 0x14) 13:55:54 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x40, 0x0) fcntl$dupfd(r0, 0x0, r0) 13:55:54 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0xffffffffffffffe8) 13:55:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000080), 0x0) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f1003, 0x159) 13:55:54 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28143, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x59) 13:55:54 executing program 4: r0 = msgget$private(0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/90) 13:55:54 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) 13:55:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') syz_fuse_handle_req(r0, &(0x7f0000000100)="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", 0x2000, &(0x7f000000ae40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:55:54 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:54 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x125000, 0x0) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0xf) 13:55:54 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x0) [ 771.394141][ T5135] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 771.564048][T32230] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 771.594019][ T27] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 771.855395][ T5135] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 771.865810][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 771.879249][ T5135] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.890402][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.901241][ T5135] usb 3-1: config 0 descriptor?? [ 771.924269][T32230] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 771.935633][T32230] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 771.951247][T32230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.961589][T32230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.961715][ T5135] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 771.983378][T32230] usb 2-1: config 0 descriptor?? [ 772.038107][T32230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 772.044148][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.058781][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 772.072104][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.081506][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.092714][ T27] usb 1-1: config 0 descriptor?? [ 772.156751][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 772.182137][ T27] usb 3-1: USB disconnect, device number 39 [ 772.238607][T32230] usb 2-1: USB disconnect, device number 51 [ 772.358345][ T5135] usb 1-1: USB disconnect, device number 45 13:55:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x8040, 0x4) 13:55:56 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) [ 772.651046][ T5135] usb 4-1: USB disconnect, device number 51 13:55:56 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x59) 13:55:56 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x840, 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200500, 0x20) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x40) 13:55:56 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x8040, 0x10e) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x129142, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42000, 0x54) [ 773.028109][ T5222] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 773.053083][ T28] audit: type=1804 audit(1708264556.415:166): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/716/file0" dev="sda1" ino=1961 res=1 errno=0 13:55:56 executing program 4: r0 = msgget(0x3, 0x0) msgrcv(r0, &(0x7f0000001040)=ANY=[@ANYRES8=0x0], 0x61d, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) [ 773.063948][T32230] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 773.094321][ T5135] usb 4-1: new high-speed USB device number 52 using dummy_hcd 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x108) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x8840, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x20) [ 773.177124][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd 13:55:56 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) fstat(r0, &(0x7f0000002880)) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 13:55:56 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x10b940, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40) 13:55:56 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x7) 13:55:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0)="0d4739663f9eb7115ba47ed0", 0xc) [ 773.404311][ T5222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.418824][ T5222] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 773.433105][ T5222] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.449141][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.457745][T32230] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 773.489075][T32230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 773.503349][ T5222] usb 3-1: config 0 descriptor?? [ 773.514247][ T5135] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 773.515305][T32230] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.534046][ T5135] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 773.534097][ T5135] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.534122][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.538062][ T5135] usb 4-1: config 0 descriptor?? [ 773.554601][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.586165][ T5222] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 13:55:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9e404c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc67510800d1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f342a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0ec5be2b0e1a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbeff00000076f7049db5cb11d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c455405000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75d6f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f39a835c7a178aa3bc514909187b6b0776952be5cb0417d33d3ab254934d905d30dfe64d05ac37ed018494d9d10d76e60312925727b914098e492cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c3527f829866e4e84aa92000000000072b08b3ac52db204399eca67637b40ead0e35dfaf335762b8c3a7c32d5b26ea19b1e5c0904e48ece787280f0bc830f74ba53eb137caadc1bef77d7719bf8dc85041c518b998d65e145cb850290636dba724e205398889a62d539bffcafe51010b6b403982a2192423ecde123a9f517a8c0b1b36588bb5e0995e7175d6f107b15ef10480d8431e6b013e1368e824f8ab00a168f7347d7d3a7e440059c382021a7854a95b5bef58b3e5120483b23bba5ba9cf77a1a7cb48f740c21b77ce18839d12d016dc34385995dbc77b10190bac13cc9d52332db34141b506f4ea720b63fdaaa8d20517283258f88959dedab82772db1cb633174276b86ce30121099d2e224684e74c1f03d9ba6e6139e113df605536d6378b9ec9648d6796c2cf9b719586f60a973e592b0303f44c71f055f6e44735512b3211eace4250740f8c1d9c2ca2c303b6a92412596e76ca93088bfe01845ad633321b796a57e2172dcb3c08051d0424c34b58e3aea702613976d1454b1aaf1cf44e1dd8e68877705d88173a8f5a29e59ffb4f42a31c69fc7caad4cd6046587ac47c6fae84684a5132331743bbe0c2cab35f9d306de9af019cf1b45e5998778d72dc44c2ca8152f48c9b04127cae81858b65c17289e21483c196b9d0684a1469e035aac34708d92ef314db608b50b24db4481d1519ca354a2ea7a6a722147b0605d607d4c094e871a9b74e2bfcb52ffca6c254f0bc6e0f83d210507076f96a74d1b80fa7ccff508cd08e6ade966e2ca37c957"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 773.612470][ T5135] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 773.614359][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 773.649316][T32230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.659738][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.670069][T32230] usb 2-1: config 0 descriptor?? [ 773.678834][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.701024][ T8] usb 1-1: config 0 descriptor?? [ 773.717703][T32230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 773.746256][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 773.758582][T32230] usb 3-1: USB disconnect, device number 40 [ 773.896521][ T28] audit: type=1804 audit(1708264557.245:167): pid=923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/725/bus" dev="sda1" ino=1961 res=1 errno=0 13:55:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 774.557065][ T8] usb 1-1: USB disconnect, device number 46 [ 774.594609][ T5135] usb 2-1: USB disconnect, device number 52 13:55:58 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) [ 774.929154][ T28] audit: type=1804 audit(1708264558.225:168): pid=930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/726/bus" dev="sda1" ino=1961 res=1 errno=0 13:55:59 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) 13:55:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13:55:59 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 776.105197][ T28] audit: type=1804 audit(1708264559.255:169): pid=941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/727/bus" dev="sda1" ino=1966 res=1 errno=0 [ 776.230679][T29925] usb 1-1: new high-speed USB device number 47 using dummy_hcd 13:56:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 776.633505][T32643] usb 4-1: USB disconnect, device number 52 [ 776.645074][T32230] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 776.744530][ T8] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 776.950437][ T28] audit: type=1804 audit(1708264560.255:170): pid=949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/728/bus" dev="sda1" ino=1966 res=1 errno=0 [ 777.324221][T29925] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 777.644371][T29925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 13:56:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9e404c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc67510800d1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f342a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0ec5be2b0e1a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbeff00000076f7049db5cb11d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c455405000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75d6f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f39a835c7a178aa3bc514909187b6b0776952be5cb0417d33d3ab254934d905d30dfe64d05ac37ed018494d9d10d76e60312925727b914098e492cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c3527f829866e4e84aa92000000000072b08b3ac52db204399eca67637b40ead0e35dfaf335762b8c3a7c32d5b26ea19b1e5c0904e48ece787280f0bc830f74ba53eb137caadc1bef77d7719bf8dc85041c518b998d65e145cb850290636dba724e205398889a62d539bffcafe51010b6b403982a2192423ecde123a9f517a8c0b1b36588bb5e0995e7175d6f107b15ef10480d8431e6b013e1368e824f8ab00a168f7347d7d3a7e440059c382021a7854a95b5bef58b3e5120483b23bba5ba9cf77a1a7cb48f740c21b77ce18839d12d016dc34385995dbc77b10190bac13cc9d52332db34141b506f4ea720b63fdaaa8d20517283258f88959dedab82772db1cb633174276b86ce30121099d2e224684e74c1f03d9ba6e6139e113df605536d6378b9ec9648d6796c2cf9b719586f60a973e592b0303f44c71f055f6e44735512b3211eace4250740f8c1d9c2ca2c303b6a92412596e76ca93088bfe01845ad633321b796a57e2172dcb3c08051d0424c34b58e3aea702613976d1454b1aaf1cf44e1dd8e68877705d88173a8f5a29e59ffb4f42a31c69fc7caad4cd6046587ac47c6fae84684a5132331743bbe0c2cab35f9d306de9af019cf1b45e5998778d72dc44c2ca8152f48c9b04127cae81858b65c17289e21483c196b9d0684a1469e035aac34708d92ef314db608b50b24db4481d1519ca354a2ea7a6a722147b0605d607d4c094e871a9b74e2bfcb52ffca6c254f0bc6e0f83d210507076f96a74d1b80fa7ccff508cd08e6ade966e2ca37c957"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13:56:01 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) [ 777.686919][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.703912][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.722382][T29925] usb 1-1: config 0 descriptor?? [ 777.766725][T29925] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 777.777361][T32230] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 777.800894][T32230] usb 3-1: can't read configurations, error -71 [ 777.807783][T32643] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 778.243430][ T28] audit: type=1804 audit(1708264561.335:171): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/729/bus" dev="sda1" ino=1966 res=1 errno=0 [ 778.672142][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 778.705051][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.720811][T29925] usb 1-1: USB disconnect, device number 47 13:56:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13:56:02 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 778.784017][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.824330][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.853735][ T8] usb 2-1: config 0 descriptor?? [ 778.884132][ T8] usb 2-1: can't set config #0, error -71 [ 778.908253][ T8] usb 2-1: USB disconnect, device number 53 [ 778.915064][T32643] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 778.931564][T32643] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 778.958035][T32643] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.100278][ T28] audit: type=1804 audit(1708264562.435:172): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/730/bus" dev="sda1" ino=1966 res=1 errno=0 [ 779.771652][T32230] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 779.780871][T32643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.791613][T32643] usb 4-1: config 0 descriptor?? 13:56:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13:56:03 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) 13:56:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 779.934273][T32643] usb 4-1: can't set config #0, error -71 [ 779.968700][T32643] usb 4-1: USB disconnect, device number 53 [ 780.014375][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 780.384070][T29925] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 780.464482][ T28] audit: type=1804 audit(1708264563.555:173): pid=975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/731/bus" dev="sda1" ino=1966 res=1 errno=0 [ 780.890275][T32230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.944289][T32230] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 13:56:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9e404c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc67510800d1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f342a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0ec5be2b0e1a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbeff00000076f7049db5cb11d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c455405000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75d6f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f39a835c7a178aa3bc514909187b6b0776952be5cb0417d33d3ab254934d905d30dfe64d05ac37ed018494d9d10d76e60312925727b914098e492cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c3527f829866e4e84aa92000000000072b08b3ac52db204399eca67637b40ead0e35dfaf335762b8c3a7c32d5b26ea19b1e5c0904e48ece787280f0bc830f74ba53eb137caadc1bef77d7719bf8dc85041c518b998d65e145cb850290636dba724e205398889a62d539bffcafe51010b6b403982a2192423ecde123a9f517a8c0b1b36588bb5e0995e7175d6f107b15ef10480d8431e6b013e1368e824f8ab00a168f7347d7d3a7e440059c382021a7854a95b5bef58b3e5120483b23bba5ba9cf77a1a7cb48f740c21b77ce18839d12d016dc34385995dbc77b10190bac13cc9d52332db34141b506f4ea720b63fdaaa8d20517283258f88959dedab82772db1cb633174276b86ce30121099d2e224684e74c1f03d9ba6e6139e113df605536d6378b9ec9648d6796c2cf9b719586f60a973e592b0303f44c71f055f6e44735512b3211eace4250740f8c1d9c2ca2c303b6a92412596e76ca93088bfe01845ad633321b796a57e2172dcb3c08051d0424c34b58e3aea702613976d1454b1aaf1cf44e1dd8e68877705d88173a8f5a29e59ffb4f42a31c69fc7caad4cd6046587ac47c6fae84684a5132331743bbe0c2cab35f9d306de9af019cf1b45e5998778d72dc44c2ca8152f48c9b04127cae81858b65c17289e21483c196b9d0684a1469e035aac34708d92ef314db608b50b24db4481d1519ca354a2ea7a6a722147b0605d607d4c094e871a9b74e2bfcb52ffca6c254f0bc6e0f83d210507076f96a74d1b80fa7ccff508cd08e6ade966e2ca37c957"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13:56:04 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 780.992866][T32230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.041198][T32230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.081825][T32230] usb 3-1: config 0 descriptor?? [ 781.117190][T32230] usb 3-1: can't set config #0, error -71 [ 781.175541][T32643] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 781.227817][ T28] audit: type=1804 audit(1708264564.585:174): pid=984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/732/bus" dev="sda1" ino=1966 res=1 errno=0 [ 781.275930][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 781.625615][T29925] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 781.924685][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.939673][T32230] usb 3-1: USB disconnect, device number 42 [ 781.948592][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:56:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9e404c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc67510800d1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f342a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0ec5be2b0e1a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbeff00000076f7049db5cb11d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c455405000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75d6f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f39a835c7a178aa3bc514909187b6b0776952be5cb0417d33d3ab254934d905d30dfe64d05ac37ed018494d9d10d76e60312925727b914098e492cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c3527f829866e4e84aa92000000000072b08b3ac52db204399eca67637b40ead0e35dfaf335762b8c3a7c32d5b26ea19b1e5c0904e48ece787280f0bc830f74ba53eb137caadc1bef77d7719bf8dc85041c518b998d65e145cb850290636dba724e205398889a62d539bffcafe51010b6b403982a2192423ecde123a9f517a8c0b1b36588bb5e0995e7175d6f107b15ef10480d8431e6b013e1368e824f8ab00a168f7347d7d3a7e440059c382021a7854a95b5bef58b3e5120483b23bba5ba9cf77a1a7cb48f740c21b77ce18839d12d016dc34385995dbc77b10190bac13cc9d52332db34141b506f4ea720b63fdaaa8d20517283258f88959dedab82772db1cb633174276b86ce30121099d2e224684e74c1f03d9ba6e6139e113df605536d6378b9ec9648d6796c2cf9b719586f60a973e592b0303f44c71f055f6e44735512b3211eace4250740f8c1d9c2ca2c303b6a92412596e76ca93088bfe01845ad633321b796a57e2172dcb3c08051d0424c34b58e3aea702613976d1454b1aaf1cf44e1dd8e68877705d88173a8f5a29e59ffb4f42a31c69fc7caad4cd6046587ac47c6fae84684a5132331743bbe0c2cab35f9d306de9af019cf1b45e5998778d72dc44c2ca8152f48c9b04127cae81858b65c17289e21483c196b9d0684a1469e035aac34708d92ef314db608b50b24db4481d1519ca354a2ea7a6a722147b0605d607d4c094e871a9b74e2bfcb52ffca6c254f0bc6e0f83d210507076f96a74d1b80fa7ccff508cd08e6ade966e2ca37c957"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 781.999085][T29925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 782.004637][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.012343][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.030613][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x401) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}, {0x0}, {0x0}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/78, 0x4e}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}}], 0x1, 0x127, &(0x7f0000000ec0)) signalfd4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x9, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x42) fcntl$setstatus(r5, 0x4, 0x46900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000007c0)) ftruncate(r5, 0x800) lseek(r5, 0x20400, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ftruncate(r5, 0x3) syz_open_procfs(0x0, &(0x7f0000000b80)='children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 782.058751][T29925] usb 1-1: config 0 descriptor?? [ 782.118395][ T8] usb 2-1: config 0 descriptor?? [ 782.140953][T29925] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 782.144447][ T8] usb 2-1: can't set config #0, error -71 [ 782.181711][ T8] usb 2-1: USB disconnect, device number 54 [ 784.405469][T32643] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping 13:56:07 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 13:56:07 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') syz_fuse_handle_req(r0, &(0x7f0000000140)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:56:07 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 784.437536][ T28] audit: type=1804 audit(1708264567.045:175): pid=990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir885376800/syzkaller.1LoVzr/233/bus" dev="sda1" ino=1966 res=1 errno=0 [ 784.494328][T32230] usb 3-1: new high-speed USB device number 43 using dummy_hcd 13:56:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:07 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 784.542644][ T28] audit: type=1804 audit(1708264567.245:176): pid=996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir843687887/syzkaller.bNnPOG/733/bus" dev="sda1" ino=1967 res=1 errno=0 [ 784.555413][T32643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.583784][ T27] usb 1-1: USB disconnect, device number 48 13:56:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0) 13:56:08 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r1) [ 784.669183][T32643] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.686870][T32643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.710949][T32643] usb 4-1: config 0 descriptor?? 13:56:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0) 13:56:08 executing program 4: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x200028, &(0x7f0000000300)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) [ 784.754469][T32643] usb 4-1: can't set config #0, error -71 [ 784.771881][T32643] usb 4-1: USB disconnect, device number 54 13:56:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0) 13:56:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'geneve1\x00', 0x0}) 13:56:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0) 13:56:08 executing program 4: r0 = inotify_init() syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) 13:56:08 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00') 13:56:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 13:56:08 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) write$binfmt_aout(r0, 0x0, 0x0) 13:56:08 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x50040, 0x0) [ 784.974019][T32230] usb 3-1: device descriptor read/64, error -71 13:56:08 executing program 4: pipe(&(0x7f0000003940)={0xffffffffffffffff}) write$P9_RSYMLINK(r0, 0x0, 0xfffffffffffffe5f) 13:56:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000004600)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x0, 0x0) 13:56:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet_nvme_of_msg(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:56:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet_nvme_of_msg(r0, 0x0, 0x80, 0x0, 0x0, 0x0) 13:56:08 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet_nvme_icreq_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 785.113960][ T27] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 785.134080][T32643] usb 4-1: new high-speed USB device number 55 using dummy_hcd 13:56:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet_nvme_of_msg(r0, &(0x7f0000000100)=ANY=[], 0x80, 0x0, 0x0, 0x0) 13:56:08 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 13:56:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000140), &(0x7f0000000100)=0xffffffffffffffc4) 13:56:08 executing program 1: pipe(&(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r0, 0x0, 0xffffffffffffff0d) 13:56:08 executing program 4: pipe(&(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r0, &(0x7f0000000300)={0xffffff83}, 0xfffffdad) write$tun(r0, 0x0, 0x0) [ 785.244093][T32230] usb 3-1: new high-speed USB device number 44 using dummy_hcd 13:56:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0xfcc0) 13:56:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4010810, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 13:56:08 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffffffffffed7) 13:56:08 executing program 1: mq_open(&(0x7f0000000080)='team0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 13:56:08 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0xffffffffffffff30, 0x0) 13:56:08 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$inet6(r0, 0x0, 0x0) 13:56:08 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x20, &(0x7f0000000200)) [ 785.504307][ T27] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 785.504466][T32643] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 785.525959][T32643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.538515][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 785.564367][T32643] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.572563][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.574117][T32643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.583546][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.605716][T32643] usb 4-1: config 0 descriptor?? [ 785.619836][ T27] usb 1-1: config 0 descriptor?? [ 785.624964][T32230] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 785.636076][T32230] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 785.650690][T32230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.668037][T32643] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 785.678602][T32230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.697631][T32230] usb 3-1: config 0 descriptor?? [ 785.702128][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 785.755538][T32230] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 785.915469][ T27] usb 1-1: USB disconnect, device number 49 [ 785.960463][T29925] usb 3-1: USB disconnect, device number 44 13:56:09 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 786.495844][T29048] Bluetooth: hci4: command 0x0406 tx timeout [ 786.773945][T29925] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 787.167267][T29925] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 787.177614][T29925] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 787.190784][T29925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.201326][T29925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.211219][T29925] usb 3-1: config 0 descriptor?? [ 787.269254][T29925] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 787.470873][T29925] usb 3-1: USB disconnect, device number 45 13:56:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) 13:56:11 executing program 4: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) 13:56:11 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 787.636761][T32230] usb 4-1: USB disconnect, device number 55 13:56:11 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) close_range(r0, r1, 0x0) 13:56:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000100)) 13:56:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, 0x0, 0x0) 13:56:11 executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000480)={[{@dmask={'dmask', 0x3d, 0x4}}, {@fmask}, {@discard}, {}, {@dmask={'dmask', 0x3d, 0x6b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@namecase}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$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") 13:56:11 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xde96, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) 13:56:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="686dc55bed9f"}, 0x10) 13:56:11 executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000480)={[{@dmask={'dmask', 0x3d, 0x4}}, {@fmask}, {@discard}, {}, {@dmask={'dmask', 0x3d, 0x6b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@namecase}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3HuYjlXbMPB1rrUuxjTpbpLNsM51XtxpsEySZJOQTZIkSZJdQtIkSUJiyC5pSEK2k2QzhGQzjUljv99knzR5pEmSkOzC+g49z/d6nrfnffve7+n7HO875+841nGvc677PO+15pxjrs0f9w89R9VrUb92MyIS/xL460uKECJGCDFMCHGDECIQQlSKrxR/5XgBBSn/2oewP9ej6dd6Bexa4v7nbdz/vI37n7dx//M27n/exv3P27j/eRv3n7G8bPucYjfyyLuDn//nZXz+/x8kt/zkbzaWv7nXfyGF+5+3cf/zNu5/3sb9z9u4/3kb9/9/vlr/yTHuf97G/WcsL7vWz595XNtxrf/+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlDef8VVoIceVVXutFMcYYY4wxxhhj7E/l81/rFTDGGGOMMcYYY+z/PRBSKKFFIPKJ/CJGFBCx4joRJ64XBcUNIiJuFPHiJlFI3CwKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhFlBa3ikRRRpQV5YQT5UWSuE1UELeLiuIOUUncKSqLu0QVUVVUE9XF3aKGuEfUFLVEbXGvqCPqinqivrhPNBD3i4biAdFIPCgai4dEE/GwaCoeEc3Eo6K5eEy0EI+LluIJ0Uq0Fm1EW9Hu/yr/FdFXvCr6if4iRQwQA8VrYpAYLIaIoWKYeF0MF2+IEeJNkSpGilHiLTFavC3GiHfEWDFOjBfvigliopgkJospYqpIE++JaeJ9MV18IGaImWKWmC3SxRwxV3wo5on5YoH4SCwUH4tFYrFYIpaKDPGJyBTLRJb4VCwXn4lssUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdvG52CF2il1it9gj9op94guxX3wpDoivRI74+r+Yf/bf5fcCAQIkSNCgIR/kgxiIgViIhTiIg4JQECIQgXiIh0JQCApDYSgKRSEBEqAElAAEBAKCklASohCF0lAaEiERykJZcOAgCZKgAtwOFaEiVIJKUBkqQxWoClWhOlSHGlADakJNqA21oQ7UgXpQD+6D++B+aAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoCS2hFbSCNtAG2kE7aA/toQN0gE7QCTpDZ+gCXSAZkqErdIVu0A26Q3foAT2gJ/SEXtAbesMr8Aq8Cq9Cf6gjB8BAGAiDYBAMgaEwFF6H4fAGvAFvQiqMhFHwFrwFb8MYOANjYRyMh/FQQ06ESTAZSE6FNEiDaTANpsN0mAEzYSbMhnSYA3NhLsyD+TAfPoKF8DF8DIthMSyFDMiATFgGWZAFy+EsZMMKWAmrYDWsgdWwDtbDOtgIm2AjbIEtsA22wefwOeyEnbAbdsNe2AtfwBfwJXwJqZADOXAQDsIhOASH4TDkQi4cgSNwFI7CMTgGx+E4nICTcApOwmk4DWfgLJyDc3ABLsBFeCnhu+Z7y2xIFfIKLbXMJ/PJGBkjY2WsjJNxsqAsKCMyIuNlvCwkC8nCsrAsKovKBJkgS8gSEiVKkqEsKUvKqIzK0rK0TJSJsqwsK510MkkmyQqygqwoK8pK8k5ZWd4lq8iqsqOrLqvLGrKTqylrydqytqwj68p6sr6sLxvIBrKhbCgbyUaysWwsm8iHZVM5AIbAo/JKZ1rIkdBSjoJWsrVsI9vKt+FJ2V6OgQ6yo+wkn5bjYCx0ke1dsnxOdpWToJt8QU6GF2UPORV6ypdlL9lb9pGvyL6yg+sn+8sZMEAOlLNhkBwsh8ihch7UlVc6Vk++KVPlSDlKviWXwttyjHxHjpXj5Hj5rpwgJ8pJcrKcIqfKNPmenCbfl9PlB3KGnClnydkyXc6Rc+WHcp6cLxfIj+RC+bFcJBfLJXKpzJCfyEy5TGbJT+Vy+ZnMlivkSrlKrpZr5Fq5Tq6XG+RGuUlullvkVrlNbpefyx1yp9wld8s9cq/cJ7+Q++WX8oD8SubIr+VB+Rd5SH4jD8tvZa78Th6R38uj8gd5TP4oj8uf5Al5Up6SP8vT8hd5Rp6V5+R5eUH+Ki/KS/Ky9FIoUFIppVWg8qn8KkYVULHqOhWnrlcF1Q0qom5U8eomVUjdrAqrIqqoKqYSVHFVQhmFyipSoSqpSqmoukWVVreqRFVGlVXllFPlVZK6TVVQt6uK6g5VSd2pKqu7VBVVVVVT1dXdqoa6R9VUtVRtda+qo+qqeqq+uk81UPerhuoB1Ug9qBqrh1QT9bBqqh5RzdSjqrl6TLVQj6uW6gnVSrVWbVRb1U49qdqrp1QH1VF1Uk+rzuoZ1UU9q5LVc6qrel51Uy+o7upF1UO9pHqql1Uv1Vv1UZfUZeVVP9VfpagBaqB6TQ1Sg9UQNVQNU6+r4eoNNUK9qVLVSDVKvaVGq7fVGPWOGqvGqfHqXTVBTVST1GQ1RU1Vaeo9NU29r6arD9QMNVPNUrNVupqjhvyt0oL/g/z3/0n+iN8+fZvarj5XO9ROtUvtVnvUXrVP7VP71X51QB1QOSpHHVQH1SF1SB1Wh1WuylVH1BF1VB1Vx9QxdVwdVyfUSXVe/axOq1/UGXVWnVXn1QV1QV382+9AaNBSK611oPPp/DpGF9Cx+jodp6/XBfUNOqJv1PH6Jl1I36wL6yK6qC6mE3RxXUIbjdpq0qEuqUvpqL5Fl9a36kRdRpfV5bTT5XWSvu1fzv+j9bXT7XR73V530B10J91Jd9addRfdRSfrZN1Vd9XddDfdXXfXPXQP3VP31L10L91H99F9dV/dT/fTKTpFD9Sv6UF6sB6ih+ph+nU9XA/XI/QInapT9Sg9So/Wo/UYPUaP1WP1eD1eT9AT9CQ9SU/RU3SaTtPT9DQ9XU/XM/QMPUvP0uk6Xc/Vc/U8PU8v0Av0Qr1QL9KL9BK9RGfoDJ2pM3WWztLL9XKdrVfoFXqVXqXX6DV6nV6nN+gNepPepLfoLTpbb9fb9Q69Q+/Su/QevUfv0/v0fr1fH9AHdI7O0Qf1QX1IH9KH9WGdq3P1EX1EH9VH9TF9TB/Xx/UJfUKf0qf0aX1an9Fn9Dl9Tl/QF/RFfVFf1pevXPYFMpCBDnSQL8gXxAQxQWwQG8QFcUHBoGAQCSJBfBAfFApuDgoHRYKiQbEgISgelAhMgIENKAiDkkGpIBrcEpQObg0SgzJB2aBc4ILyQVJwW1AhuD2oGNwRVAruDCoHdwVVgqpBtaB6cHdQI7gnqBnUCmoH9wZ1grpBvaB+cF/QILg/aBg8EDQKHgwaBw8FTYKHg6bBI0Gz4NGgefBY0CJ4PGgZPBG0CloHbYK2Qbs/tb73Z4o85fqZ/ibFDDADzWtmkBlshpihZph53Qw3b5gR5k2TakaaUeYtM9q8bcaYd8xYM86MN++aCWaimWQmmylmqkkz75lp5n0z3XxgZpiZZpaZbdLNHDPXfGjmmflmgfnILDQfm0VmsVlilpoM84nJNMtMlvnULDefmWyzwqw0q8xqs8asNevMerPBbDSbzGazxWw128x287nZYXaaXWa32WP2mn3mC7PffGkOmK9MjvnaHDR/MYfMN+aw+dbkmu/MEfO9OWp+MMfMj+a4+cmcMCfNKfOzOW1+MWfMWXPOnDcXzK/morlkLht/5eL+yukdNWrMh/kwBmMwFmMxDuOwIBbECEYwHuOxEBbCwlgYi2JRTMAELIEl8ApCwpJYEqMYxdJYGhMxEctiWXToMAmTsAJWwIpYESthJayMlbEKVsFqWA3vxrvxHrwHa2EtvBfvxbpYF+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsCW2xFbYCttgG2yH7bA9tscO2AE7YSfsjJ2xC3bBZEzGrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A9TMAUH4kAchINwCA7BYTgMh+NwHIEjMBVTcRSOwtE4GsfgGByL43A8vosTcCJOwsk4BadiGqbhNJyG03E6zsAZOAtnYTqm41yci/NwHi7ABbgQF+IiXIRLcAlmYAZmYiZmYRYux+WYjdm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyAOZiDB/EgHsJDeBgPYy7m4hE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/BXvIiX8DJ6jLFSxNrrbJy93ha0N9gYW8D+fVzUFrMJtrgtYY0tbIv8Q4zW2kRbxpa15ayz5W2Sve13cRVb1Vaz1e3dtoa9x9b8XdzA3m8b2gdsI/ugrW/v+4e4sX3INrGP26b2CdvMtrbNbVvbwj5uW9onbCvb2raxbW1n+4ztYp+1yfY529U+/7s40y6z6+0Gu9Fusvvtl/acPW+P2h/sBfur7Wf722H2dTvcvmFH2Ddtqh35u3i8fddOsBPtJDvZTrFTfxfPsrNtup1j59oP7Tw7/3dxhv3ELrRZdpFdbJfYpb/FV9aUZT+1y+1nNtuusCvtKrvarrFr7bp/W+squ8VutdvsPvuF3WF32l12t91j9/4WX9nHAfuVzbFf2yP2e3vIfmMP22M21373W3xlf8fsj/a4/cmesCftKfuzPW1/sWfs2d/2f2XvP9tL9rL1VhCQJEWaAspH+SmGClAsXUdxdD0VpBsoQjdSPN1EhehmKkxFqCgVowQqTiXIEJIlopBKUimK0i1Umm6lRCpDZakcOSpPSXQbVaDbqSLdQZXoTqpMd1EVqkrVqDrdTTXoHqpJtag23Ut1qC7Vo/p0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6klPUGtqDW1obbUjp6k9vQUdaCO1Imeps70DHWhZymZnqOu9Dx1oxeoO71IPegl6kkvUy/qTX3oFepLr1I/6k8pNIAG0ms0iAbTEBpKw+h1Gk5v0Ah6k1JpJI2it2g0vU1j6B0aS+NoPL1LE2giTaLJNIWmUhq9R9PofZpOH9AMmkmzaDal0xyaSx/SPJpPC+gjWkgf0yJaTEtoKWXQJ5RJyyiLPqXl9Bll0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbT57SDdtIu2k17aC/toy9oP31JB+gryqGv6SD9hQ7RN3SYvqVc+o6O0Pd0lH6gY/QjHaef6ASdpFP0M52mX+gMnaVzdJ4u0K90kS7RZfIkQghlqEIdBmG+MH8YExYIY8Prwrjw+rBgeEMYCW8M48ObwkLhzWHhsEhYNCwWJoTFwxKhCTG0IYVhWDIsFUbDW8LS4a1hYlgmLBuWC11YPkwKbwsrhLeHFcM7wkrhnWHl8K6wSlg1fPzB6uHdYY3wnrBmWCusHd4b1gnrhvXC+uF9YYPw/rBh+EDYKHwwrBg+FDYJHw6bho+EzcJHw+bhY2GL8PGwZfhE2CpsHbYJ24btwifD9uFTYYewY9gpfDrsHD4TdgmfDZPD58Ku4fN/eDwlHBAODF8LXwu9f0AtiS6NZkQ/iWZGl0Wzop9Gl0c/i2ZHV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+fXzhw0imnXeDyufwuxhVwse46F+eudwXdDS7ibnTx7iZXyN3sCrsirqgr5hJccVfCGYfOOnKhK+lKuai7xZV2t7pEV8aVdeWcc+Vdkmvr2rl2rr17ynVwHV0n97R72j3jnnHPumfdc66re951cy+47u5F18O95F5yL7terrfr415xfd2rrp/r71JcihvoBrpBbpAb4oa4YW6YG+6GuxFuhEt1qW6UG+VGu9FujBvjxrqxbrwb7ya4CW6Sm+SmuCkuzaW5aW6am+6muxluhpvlZrl0l+7murlunpvnFrgFbmHiQrfILXJL3BKX4TJcpst0WS7LLXfLXbbLdivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXA5LscddAfdIXfIHXbfulz3nTvivndH3Q/umPvRHXc/uRPupDvlfnan3S/ujDvrzrnz7oL71V10l9xl511a5L3ItMj7kemRDyIzIjMjsyKzI+mROZG5kQ8j8yLzIwsiH0UWRj6OLIosjiyJLI1kRD6JZEaWRbIin0aWRz6LZEdWRFZGVkVWR9ZEvC++I/QlfSkf9bf40v5Wn+jL+LK+nHe+vE/yt/kK/nZf0d/hK/k7fWV/l6/iq/pq/gnfyrf2bXxb384/6dv7p3wH39F38k/7zv4Z38U/65P9c76rf9538y/47v5F38O/5Hv6l30v39v38a/4vv5V38/39yl+gB/oX/OD/GA/xA/1w/zrfrh/w4/wb/pUP9KP8m/50f5tP8a/48f6cX68f9dP8BP9JD/ZT/FTfZp/z0/z7/vp/gM/w8/0s/xsn+7n+Ln+Qz/Pz/cL/Ed+of/YL/KL/RK/1Gf4T3ymX+az/Kd+uf/MZ/sVfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7z/0Ov9Pv8rv9Hr/X7/Nf+P3+S3/Af+Vz/Nf+oP+LP+S/8Yf9tz7Xf+eP+O/9Uf+DP+Z/9Mf9T/6EP+lP+Z/9af+LP+PP+nP+vL/gf/UX/SV/2Xt/rZ+kM8YYY4z9d6D+4PiAf/Iz+bdxxUAhxPU7i+X++5qbC/91PlgmdI4IIZ7r3/PR/z3q1ElJSfnbe7OVCEotFkJErubnE1fjFaKTeEYki46iwj9d32DZ+wL9Qf3onULE/l1OjLgaX61/+39Q/8mnx2dWDs/F/yf1FwuRWOpqTgFxNb5av+J/UL9I+z9Yf4Fv0oTo8Hc5ceJqfLV+knhKPC+S/+GdjDHGGGOMMcbYXw2W1br/0f3zlfvzBH01J7+4Gv/R/TljjDHGGGOMMcauvRd793n2yeTkjt15whOe8OTfJtf6PxNjjDHGGGPsz3b1ov9ar4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu7/n98ndi13iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2rf2vAAAA//9iwzg5") [ 787.835637][ T1091] loop4: detected capacity change from 0 to 256 [ 787.847710][ T1091] exfat: Deprecated parameter 'namecase' [ 787.871184][ T1091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) 13:56:11 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000980)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 787.944267][ T5222] usb 1-1: new high-speed USB device number 50 using dummy_hcd 13:56:11 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 13:56:11 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 788.023623][ T1100] loop4: detected capacity change from 0 to 256 [ 788.039848][ T1100] exfat: Deprecated parameter 'namecase' 13:56:11 executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000480)={[{@dmask={'dmask', 0x3d, 0x4}}, {@fmask}, {@discard}, {}, {@dmask={'dmask', 0x3d, 0x6b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@namecase}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$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") [ 788.086426][ T1100] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 788.114059][T32230] usb 4-1: new high-speed USB device number 56 using dummy_hcd 13:56:11 executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000480)={[{@dmask={'dmask', 0x3d, 0x4}}, {@fmask}, {@discard}, {}, {@dmask={'dmask', 0x3d, 0x6b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@namecase}, {@discard}]}, 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3HuYjlXbMPB1rrUuxjTpbpLNsM51XtxpsEySZJOQTZIkSZJdQtIkSUJiyC5pSEK2k2QzhGQzjUljv99knzR5pEmSkOzC+g49z/d6nrfnffve7+n7HO875+841nGvc677PO+15pxjrs0f9w89R9VrUb92MyIS/xL460uKECJGCDFMCHGDECIQQlSKrxR/5XgBBSn/2oewP9ej6dd6Bexa4v7nbdz/vI37n7dx//M27n/exv3P27j/eRv3n7G8bPucYjfyyLuDn//nZXz+/x8kt/zkbzaWv7nXfyGF+5+3cf/zNu5/3sb9z9u4/3kb9/9/vlr/yTHuf97G/WcsL7vWz595XNtxrf/+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlDef8VVoIceVVXutFMcYYY4wxxhhj7E/l81/rFTDGGGOMMcYYY+z/PRBSKKFFIPKJ/CJGFBCx4joRJ64XBcUNIiJuFPHiJlFI3CwKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhFlBa3ikRRRpQV5YQT5UWSuE1UELeLiuIOUUncKSqLu0QVUVVUE9XF3aKGuEfUFLVEbXGvqCPqinqivrhPNBD3i4biAdFIPCgai4dEE/GwaCoeEc3Eo6K5eEy0EI+LluIJ0Uq0Fm1EW9Hu/yr/FdFXvCr6if4iRQwQA8VrYpAYLIaIoWKYeF0MF2+IEeJNkSpGilHiLTFavC3GiHfEWDFOjBfvigliopgkJospYqpIE++JaeJ9MV18IGaImWKWmC3SxRwxV3wo5on5YoH4SCwUH4tFYrFYIpaKDPGJyBTLRJb4VCwXn4lssUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdvG52CF2il1it9gj9op94guxX3wpDoivRI74+r+Yf/bf5fcCAQIkSNCgIR/kgxiIgViIhTiIg4JQECIQgXiIh0JQCApDYSgKRSEBEqAElAAEBAKCklASohCF0lAaEiERykJZcOAgCZKgAtwOFaEiVIJKUBkqQxWoClWhOlSHGlADakJNqA21oQ7UgXpQD+6D++B+aAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoCS2hFbSCNtAG2kE7aA/toQN0gE7QCTpDZ+gCXSAZkqErdIVu0A26Q3foAT2gJ/SEXtAbesMr8Aq8Cq9Cf6gjB8BAGAiDYBAMgaEwFF6H4fAGvAFvQiqMhFHwFrwFb8MYOANjYRyMh/FQQ06ESTAZSE6FNEiDaTANpsN0mAEzYSbMhnSYA3NhLsyD+TAfPoKF8DF8DIthMSyFDMiATFgGWZAFy+EsZMMKWAmrYDWsgdWwDtbDOtgIm2AjbIEtsA22wefwOeyEnbAbdsNe2AtfwBfwJXwJqZADOXAQDsIhOASH4TDkQi4cgSNwFI7CMTgGx+E4nICTcApOwmk4DWfgLJyDc3ABLsBFeCnhu+Z7y2xIFfIKLbXMJ/PJGBkjY2WsjJNxsqAsKCMyIuNlvCwkC8nCsrAsKovKBJkgS8gSEiVKkqEsKUvKqIzK0rK0TJSJsqwsK510MkkmyQqygqwoK8pK8k5ZWd4lq8iqsqOrLqvLGrKTqylrydqytqwj68p6sr6sLxvIBrKhbCgbyUaysWwsm8iHZVM5AIbAo/JKZ1rIkdBSjoJWsrVsI9vKt+FJ2V6OgQ6yo+wkn5bjYCx0ke1dsnxOdpWToJt8QU6GF2UPORV6ypdlL9lb9pGvyL6yg+sn+8sZMEAOlLNhkBwsh8ihch7UlVc6Vk++KVPlSDlKviWXwttyjHxHjpXj5Hj5rpwgJ8pJcrKcIqfKNPmenCbfl9PlB3KGnClnydkyXc6Rc+WHcp6cLxfIj+RC+bFcJBfLJXKpzJCfyEy5TGbJT+Vy+ZnMlivkSrlKrpZr5Fq5Tq6XG+RGuUlullvkVrlNbpefyx1yp9wld8s9cq/cJ7+Q++WX8oD8SubIr+VB+Rd5SH4jD8tvZa78Th6R38uj8gd5TP4oj8uf5Al5Up6SP8vT8hd5Rp6V5+R5eUH+Ki/KS/Ky9FIoUFIppVWg8qn8KkYVULHqOhWnrlcF1Q0qom5U8eomVUjdrAqrIqqoKqYSVHFVQhmFyipSoSqpSqmoukWVVreqRFVGlVXllFPlVZK6TVVQt6uK6g5VSd2pKqu7VBVVVVVT1dXdqoa6R9VUtVRtda+qo+qqeqq+uk81UPerhuoB1Ug9qBqrh1QT9bBqqh5RzdSjqrl6TLVQj6uW6gnVSrVWbVRb1U49qdqrp1QH1VF1Uk+rzuoZ1UU9q5LVc6qrel51Uy+o7upF1UO9pHqql1Uv1Vv1UZfUZeVVP9VfpagBaqB6TQ1Sg9UQNVQNU6+r4eoNNUK9qVLVSDVKvaVGq7fVGPWOGqvGqfHqXTVBTVST1GQ1RU1Vaeo9NU29r6arD9QMNVPNUrNVupqjhvyt0oL/g/z3/0n+iN8+fZvarj5XO9ROtUvtVnvUXrVP7VP71X51QB1QOSpHHVQH1SF1SB1Wh1WuylVH1BF1VB1Vx9QxdVwdVyfUSXVe/axOq1/UGXVWnVXn1QV1QV382+9AaNBSK611oPPp/DpGF9Cx+jodp6/XBfUNOqJv1PH6Jl1I36wL6yK6qC6mE3RxXUIbjdpq0qEuqUvpqL5Fl9a36kRdRpfV5bTT5XWSvu1fzv+j9bXT7XR73V530B10J91Jd9addRfdRSfrZN1Vd9XddDfdXXfXPXQP3VP31L10L91H99F9dV/dT/fTKTpFD9Sv6UF6sB6ih+ph+nU9XA/XI/QInapT9Sg9So/Wo/UYPUaP1WP1eD1eT9AT9CQ9SU/RU3SaTtPT9DQ9XU/XM/QMPUvP0uk6Xc/Vc/U8PU8v0Av0Qr1QL9KL9BK9RGfoDJ2pM3WWztLL9XKdrVfoFXqVXqXX6DV6nV6nN+gNepPepLfoLTpbb9fb9Q69Q+/Su/QevUfv0/v0fr1fH9AHdI7O0Qf1QX1IH9KH9WGdq3P1EX1EH9VH9TF9TB/Xx/UJfUKf0qf0aX1an9Fn9Dl9Tl/QF/RFfVFf1pevXPYFMpCBDnSQL8gXxAQxQWwQG8QFcUHBoGAQCSJBfBAfFApuDgoHRYKiQbEgISgelAhMgIENKAiDkkGpIBrcEpQObg0SgzJB2aBc4ILyQVJwW1AhuD2oGNwRVAruDCoHdwVVgqpBtaB6cHdQI7gnqBnUCmoH9wZ1grpBvaB+cF/QILg/aBg8EDQKHgwaBw8FTYKHg6bBI0Gz4NGgefBY0CJ4PGgZPBG0CloHbYK2Qbs/tb73Z4o85fqZ/ibFDDADzWtmkBlshpihZph53Qw3b5gR5k2TakaaUeYtM9q8bcaYd8xYM86MN++aCWaimWQmmylmqkkz75lp5n0z3XxgZpiZZpaZbdLNHDPXfGjmmflmgfnILDQfm0VmsVlilpoM84nJNMtMlvnULDefmWyzwqw0q8xqs8asNevMerPBbDSbzGazxWw128x287nZYXaaXWa32WP2mn3mC7PffGkOmK9MjvnaHDR/MYfMN+aw+dbkmu/MEfO9OWp+MMfMj+a4+cmcMCfNKfOzOW1+MWfMWXPOnDcXzK/morlkLht/5eL+yukdNWrMh/kwBmMwFmMxDuOwIBbECEYwHuOxEBbCwlgYi2JRTMAELIEl8ApCwpJYEqMYxdJYGhMxEctiWXToMAmTsAJWwIpYESthJayMlbEKVsFqWA3vxrvxHrwHa2EtvBfvxbpYF+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsCW2xFbYCttgG2yH7bA9tscO2AE7YSfsjJ2xC3bBZEzGrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A9TMAUH4kAchINwCA7BYTgMh+NwHIEjMBVTcRSOwtE4GsfgGByL43A8vosTcCJOwsk4BadiGqbhNJyG03E6zsAZOAtnYTqm41yci/NwHi7ABbgQF+IiXIRLcAlmYAZmYiZmYRYux+WYjdm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyAOZiDB/EgHsJDeBgPYy7m4hE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/BXvIiX8DJ6jLFSxNrrbJy93ha0N9gYW8D+fVzUFrMJtrgtYY0tbIv8Q4zW2kRbxpa15ayz5W2Sve13cRVb1Vaz1e3dtoa9x9b8XdzA3m8b2gdsI/ugrW/v+4e4sX3INrGP26b2CdvMtrbNbVvbwj5uW9onbCvb2raxbW1n+4ztYp+1yfY529U+/7s40y6z6+0Gu9Fusvvtl/acPW+P2h/sBfur7Wf722H2dTvcvmFH2Ddtqh35u3i8fddOsBPtJDvZTrFTfxfPsrNtup1j59oP7Tw7/3dxhv3ELrRZdpFdbJfYpb/FV9aUZT+1y+1nNtuusCvtKrvarrFr7bp/W+squ8VutdvsPvuF3WF32l12t91j9/4WX9nHAfuVzbFf2yP2e3vIfmMP22M21373W3xlf8fsj/a4/cmesCftKfuzPW1/sWfs2d/2f2XvP9tL9rL1VhCQJEWaAspH+SmGClAsXUdxdD0VpBsoQjdSPN1EhehmKkxFqCgVowQqTiXIEJIlopBKUimK0i1Umm6lRCpDZakcOSpPSXQbVaDbqSLdQZXoTqpMd1EVqkrVqDrdTTXoHqpJtag23Ut1qC7Vo/p0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6klPUGtqDW1obbUjp6k9vQUdaCO1Imeps70DHWhZymZnqOu9Dx1oxeoO71IPegl6kkvUy/qTX3oFepLr1I/6k8pNIAG0ms0iAbTEBpKw+h1Gk5v0Ah6k1JpJI2it2g0vU1j6B0aS+NoPL1LE2giTaLJNIWmUhq9R9PofZpOH9AMmkmzaDal0xyaSx/SPJpPC+gjWkgf0yJaTEtoKWXQJ5RJyyiLPqXl9Bll0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbT57SDdtIu2k17aC/toy9oP31JB+gryqGv6SD9hQ7RN3SYvqVc+o6O0Pd0lH6gY/QjHaef6ASdpFP0M52mX+gMnaVzdJ4u0K90kS7RZfIkQghlqEIdBmG+MH8YExYIY8Prwrjw+rBgeEMYCW8M48ObwkLhzWHhsEhYNCwWJoTFwxKhCTG0IYVhWDIsFUbDW8LS4a1hYlgmLBuWC11YPkwKbwsrhLeHFcM7wkrhnWHl8K6wSlg1fPzB6uHdYY3wnrBmWCusHd4b1gnrhvXC+uF9YYPw/rBh+EDYKHwwrBg+FDYJHw6bho+EzcJHw+bhY2GL8PGwZfhE2CpsHbYJ24btwifD9uFTYYewY9gpfDrsHD4TdgmfDZPD58Ku4fN/eDwlHBAODF8LXwu9f0AtiS6NZkQ/iWZGl0Wzop9Gl0c/i2ZHV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+fXzhw0imnXeDyufwuxhVwse46F+eudwXdDS7ibnTx7iZXyN3sCrsirqgr5hJccVfCGYfOOnKhK+lKuai7xZV2t7pEV8aVdeWcc+Vdkmvr2rl2rr17ynVwHV0n97R72j3jnnHPumfdc66re951cy+47u5F18O95F5yL7terrfr415xfd2rrp/r71JcihvoBrpBbpAb4oa4YW6YG+6GuxFuhEt1qW6UG+VGu9FujBvjxrqxbrwb7ya4CW6Sm+SmuCkuzaW5aW6am+6muxluhpvlZrl0l+7murlunpvnFrgFbmHiQrfILXJL3BKX4TJcpst0WS7LLXfLXbbLdivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXA5LscddAfdIXfIHXbfulz3nTvivndH3Q/umPvRHXc/uRPupDvlfnan3S/ujDvrzrnz7oL71V10l9xl511a5L3ItMj7kemRDyIzIjMjsyKzI+mROZG5kQ8j8yLzIwsiH0UWRj6OLIosjiyJLI1kRD6JZEaWRbIin0aWRz6LZEdWRFZGVkVWR9ZEvC++I/QlfSkf9bf40v5Wn+jL+LK+nHe+vE/yt/kK/nZf0d/hK/k7fWV/l6/iq/pq/gnfyrf2bXxb384/6dv7p3wH39F38k/7zv4Z38U/65P9c76rf9538y/47v5F38O/5Hv6l30v39v38a/4vv5V38/39yl+gB/oX/OD/GA/xA/1w/zrfrh/w4/wb/pUP9KP8m/50f5tP8a/48f6cX68f9dP8BP9JD/ZT/FTfZp/z0/z7/vp/gM/w8/0s/xsn+7n+Ln+Qz/Pz/cL/Ed+of/YL/KL/RK/1Gf4T3ymX+az/Kd+uf/MZ/sVfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7z/0Ov9Pv8rv9Hr/X7/Nf+P3+S3/Af+Vz/Nf+oP+LP+S/8Yf9tz7Xf+eP+O/9Uf+DP+Z/9Mf9T/6EP+lP+Z/9af+LP+PP+nP+vL/gf/UX/SV/2Xt/rZ+kM8YYY4z9d6D+4PiAf/Iz+bdxxUAhxPU7i+X++5qbC/91PlgmdI4IIZ7r3/PR/z3q1ElJSfnbe7OVCEotFkJErubnE1fjFaKTeEYki46iwj9d32DZ+wL9Qf3onULE/l1OjLgaX61/+39Q/8mnx2dWDs/F/yf1FwuRWOpqTgFxNb5av+J/UL9I+z9Yf4Fv0oTo8Hc5ceJqfLV+knhKPC+S/+GdjDHGGGOMMcbYXw2W1br/0f3zlfvzBH01J7+4Gv/R/TljjDHGGGOMMcauvRd793n2yeTkjt15whOe8OTfJtf6PxNjjDHGGGPsz3b1ov9ar4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu7/n98ndi13iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2rf2vAAAA//9iwzg5") [ 788.202426][ T1106] loop4: detected capacity change from 0 to 256 [ 788.210784][ T1106] exfat: Deprecated parameter 'namecase' [ 788.230976][ T1106] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 788.326702][ T5222] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 788.337334][ T1108] loop4: detected capacity change from 0 to 256 [ 788.343151][ T1108] exfat: Deprecated parameter 'namecase' [ 788.351628][ T5222] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:11 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) [ 788.367101][ T1108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 788.373935][ T8] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 788.386992][T32643] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 788.402757][ T5222] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.428030][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.453578][ T5222] usb 1-1: config 0 descriptor?? [ 788.519296][ T5222] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 788.544684][T32230] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 788.555517][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 788.568672][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.580403][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.601075][T32230] usb 4-1: config 0 descriptor?? [ 788.670078][T32230] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 788.719925][T32230] usb 1-1: USB disconnect, device number 50 [ 788.745140][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 788.785036][T32643] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 788.798793][T32643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 788.814518][ T8] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 788.825014][T32643] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.834367][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 788.848710][T32643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.858697][T32643] usb 3-1: config 0 descriptor?? [ 788.868089][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.877865][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.894443][ T8] usb 2-1: config 0 descriptor?? [ 788.910135][T32643] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 788.940735][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 789.103992][ T27] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 789.114577][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 789.118595][ T8] usb 3-1: USB disconnect, device number 46 [ 789.127663][ T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 789.127694][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.139232][ T27] usb 5-1: config 0 descriptor?? 13:56:12 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 789.185446][T29925] usb 2-1: USB disconnect, device number 55 [ 789.206779][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 789.420029][T29925] usb 5-1: USB disconnect, device number 7 [ 789.534083][ T27] usb 1-1: new high-speed USB device number 51 using dummy_hcd 13:56:13 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 13:56:13 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 13:56:13 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 789.924073][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 789.934005][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 789.934804][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 789.956916][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 789.970231][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.991419][ T27] usb 1-1: config 0 descriptor?? [ 790.023977][T29925] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 790.036618][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 790.247857][ T27] usb 1-1: USB disconnect, device number 51 [ 790.284140][T32643] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 790.314125][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 790.325135][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 790.338383][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.347644][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.359310][ T8] usb 3-1: config 0 descriptor?? [ 790.409019][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 790.425003][T29925] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 790.435867][T29925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 790.448809][T29925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.457940][T29925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.471554][T29925] usb 2-1: config 0 descriptor?? [ 790.516706][T29925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 790.608968][T32230] usb 3-1: USB disconnect, device number 47 [ 790.654322][T32643] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 790.665085][T32643] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 790.681171][T32643] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.690990][T32643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 790.704035][T32643] usb 5-1: config 0 descriptor?? [ 790.723002][ T8] usb 4-1: USB disconnect, device number 56 13:56:14 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 790.756393][T32643] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 790.788185][T32643] usb 2-1: USB disconnect, device number 56 [ 790.962648][T32230] usb 5-1: USB disconnect, device number 8 13:56:14 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 791.114007][ T5222] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 791.184136][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd 13:56:14 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 791.423990][ T5140] usb 3-1: new high-speed USB device number 48 using dummy_hcd 13:56:14 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) [ 791.474588][ T5222] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 791.485547][ T5222] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.500918][ T5222] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.510563][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.526670][ T5222] usb 1-1: config 0 descriptor?? [ 791.554242][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.566036][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.584700][ T5222] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 791.592533][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.609771][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.621767][ T8] usb 4-1: config 0 descriptor?? [ 791.623939][T29925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 791.784220][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 791.795017][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.813132][ T5135] usb 1-1: USB disconnect, device number 52 [ 791.818937][ T5140] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.819408][ T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 791.838796][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.852037][ T5140] usb 3-1: config 0 descriptor?? [ 791.906666][ T5140] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 792.074095][T29925] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 792.084942][T29925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.098519][T29925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.115755][ T5140] usb 3-1: USB disconnect, device number 48 [ 792.121663][T29925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.128361][T29925] usb 2-1: config 0 descriptor?? [ 792.184349][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 792.190411][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 792.201367][ T8] usb 4-1: USB disconnect, device number 57 [ 792.207157][T29925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 13:56:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 792.264068][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 792.274908][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.287984][ T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.297493][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.307718][ T27] usb 5-1: config 0 descriptor?? [ 792.363607][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 792.410561][ T8] usb 2-1: USB disconnect, device number 57 [ 792.569789][ T27] usb 5-1: USB disconnect, device number 9 13:56:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:16 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) [ 792.644159][ T5140] usb 1-1: new high-speed USB device number 53 using dummy_hcd 13:56:16 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) [ 792.964083][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 792.984150][T29925] usb 3-1: new high-speed USB device number 49 using dummy_hcd 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) [ 793.004284][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 793.017131][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.030357][ T5140] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.041660][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.052036][ T5140] usb 1-1: config 0 descriptor?? 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) [ 793.106103][ T5140] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, r2, 0x0, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x18e03c, 0x852af}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r2, 0x0, 0x8000}) 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) [ 793.223993][ T27] usb 2-1: new high-speed USB device number 58 using dummy_hcd 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) [ 793.335054][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.363292][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.384393][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.393483][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.401528][T29925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.402788][T29925] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 793.425647][T29925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) [ 793.435432][T29925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.451351][T29925] usb 3-1: config 0 descriptor?? [ 793.457420][ T8] usb 4-1: config 0 descriptor?? 13:56:16 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r0, 0x0, 0x8000}) [ 793.513084][T29925] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 13:56:16 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r0, 0x0, 0x8000}) 13:56:16 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r0, 0x0, 0x8000}) [ 793.615080][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.625652][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 793.644558][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.655006][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) [ 793.666172][ T27] usb 2-1: config 0 descriptor?? 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) [ 793.727777][ T5140] usb 3-1: USB disconnect, device number 49 [ 793.728219][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) [ 793.954254][ T5222] usb 2-1: USB disconnect, device number 58 [ 793.994176][ T8] usbhid 4-1:0.0: can't add hid device: -71 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) [ 794.000231][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 794.010588][ T8] usb 4-1: USB disconnect, device number 58 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1, 0x0, 0x8000}) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:18 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:56:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:56:18 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 795.375404][T29925] usb 1-1: USB disconnect, device number 53 13:56:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:56:18 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:56:18 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) 13:56:18 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r2, 0x373e00}) 13:56:18 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, 0x0, 0x0, 0x8000}) 13:56:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1, 0x0, r2}) 13:56:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x6, r1}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r1}) 13:56:19 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:56:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:19 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) [ 795.713987][ T27] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 795.744039][T32762] usb 2-1: new high-speed USB device number 59 using dummy_hcd 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:56:19 executing program 0: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:19 executing program 2: ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x870ff, 0x3d37b7}) 13:56:19 executing program 0: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:19 executing program 2: ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:19 executing program 0: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:19 executing program 2: ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:19 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) [ 796.084088][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.108554][T32762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.121633][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:19 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) [ 796.141733][T32762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 796.164166][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.173258][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48}) [ 796.193039][T32762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.209783][T32762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.222387][ T27] usb 4-1: config 0 descriptor?? 13:56:19 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) [ 796.254978][T32762] usb 2-1: config 0 descriptor?? [ 796.784086][T32762] usbhid 2-1:0.0: can't add hid device: -71 [ 796.790144][T32762] usbhid: probe of 2-1:0.0 failed with error -71 [ 796.796599][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 796.802554][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 796.813035][T32762] usb 2-1: USB disconnect, device number 59 [ 796.821823][ T27] usb 4-1: USB disconnect, device number 59 13:56:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:20 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:20 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:20 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:20 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:20 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:20 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48}) 13:56:20 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3f0805c7ca58babe}) 13:56:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:20 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, 0x0) 13:56:20 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) [ 797.524033][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd 13:56:20 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:21 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:21 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) 13:56:21 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, 0x0) 13:56:21 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:21 executing program 1: ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:21 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:21 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, 0x0) 13:56:21 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) 13:56:21 executing program 1: ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:21 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48}) 13:56:21 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) 13:56:21 executing program 1: ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) [ 797.904637][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.932225][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 797.943759][ T1340] overlay: Bad value for 'redirect_dir' [ 797.963249][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 797.979558][ T1340] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 797.984011][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.031728][ T8] usb 4-1: config 0 descriptor?? [ 798.574021][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 798.580045][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 798.589076][ T8] usb 4-1: USB disconnect, device number 60 13:56:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:22 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) 13:56:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) [ 799.077357][ T1349] overlay: Bad value for 'redirect_dir' 13:56:22 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48}) 13:56:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) [ 799.132501][ T1349] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xb, @sdr={0xa0363159, 0x1ff}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1400ae, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r4, 0x373e00}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdirat(r2, &(0x7f0000000500)='./file2\x00', 0x60) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x4, 0x0, &(0x7f0000000180)=[{0x2, 0x9}, {0x1, 0x8}, {0xe545, 0x4}, {0xfffffffc00000000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0xfffffffffffff2b6, 0xdc5}) 13:56:22 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) 13:56:22 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) [ 799.316280][ T1367] overlay: Bad value for 'redirect_dir' [ 799.333236][ T1367] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. 13:56:22 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) [ 799.365002][ T27] usb 4-1: new high-speed USB device number 61 using dummy_hcd 13:56:22 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) [ 799.554563][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd 13:56:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:23 executing program 2: ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:23 executing program 2: ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:23 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48}) 13:56:23 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:23 executing program 2: ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) [ 799.774152][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.810005][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.848789][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.869434][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.892937][ T27] usb 4-1: config 0 descriptor?? [ 799.934451][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 799.944937][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 799.958816][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.971212][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.988380][ T8] usb 1-1: config 0 descriptor?? [ 800.026896][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 800.238640][T29925] usb 1-1: USB disconnect, device number 54 [ 800.464079][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 800.470251][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 800.479237][ T27] usb 4-1: USB disconnect, device number 61 13:56:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:24 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x5, 0x0, &(0x7f0000000100)=[{0x7, 0x8}, {0xd1, 0x8}, {0x1ff, 0x8}, {0x3, 0xf3}, {0x4, 0x7}]}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r5, 0x22233c, 0x2, 0x2, 0x3161ce}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:24 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) [ 800.979900][ T1415] iommufd_mock iommufd_mock1: Adding to iommu group 0 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:24 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:24 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:24 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:24 executing program 1: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) [ 801.324030][ T27] usb 4-1: new high-speed USB device number 62 using dummy_hcd 13:56:24 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000004c0)={0xa, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:24 executing program 1: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r1, 0x0, 0xad77}) 13:56:24 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:24 executing program 1: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:25 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 13:56:25 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:25 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2, 0x0, 0xad77}) 13:56:25 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) [ 801.714337][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.743261][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.772229][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.787816][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.827611][ T27] usb 4-1: config 0 descriptor?? [ 802.394037][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 802.400020][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 802.409519][ T27] usb 4-1: USB disconnect, device number 62 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:26 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r2, 0x0, 0x80000001, 0x573e}) 13:56:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0x0, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0x0, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0x0, {0x5, 0x3, 0xe7, 0xfffffffb}}) 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 13:56:26 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x0, 0x3, 0xe7, 0xfffffffb}}) 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:26 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, 0x9}) 13:56:26 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) [ 803.164132][ T27] usb 4-1: new high-speed USB device number 63 using dummy_hcd 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:26 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x100}) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x0, 0x0, 0xe7, 0xfffffffb}}) 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, 0xad77}) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa, {0x0, 0x0, 0x0, 0xfffffffb}}) 13:56:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r2}) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) 13:56:26 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) 13:56:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xa}) 13:56:26 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 13:56:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001fc0)=""/159, 0x3000000, 0x9f}, 0x20) 13:56:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48}) [ 803.574036][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.618747][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) getpid() getpid() r0 = gettid() syz_open_procfs$namespace(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x200040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getpid() syz_clone(0x800000, &(0x7f00000017c0)="4d174e2666ad01f55fd555dd59ddc5ae529f46a97721da4b910ac6869401bea5f3e44eecb86d2789912514e1e8dc664f87cd65dbc6ef3d65906af16935509ce7bfab694442a52211efabe2c70a1c836261094dbc82d73ca11733f4ee389ccd0ab31e17e733f99a4d49d61530f734c27f3998ed233949501982c1ce38368640215ffe01f2ae585ec5f3ec182cd5ebb28189fee82eda085c3b95e6854253c408000770a3af8020c56561e8540782696a68ae33d5f0d0f531a3cfb04563ca", 0xbd, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="336b25cfdba8190393d87167c15bab026418433eb3f1850c2c58a90e3f92270dc80f3336434bc2ba1576e5f840c0ed390a986d0b0d620a6612e099d972be4e4a29333a01be41642f1757b4431842284442e5e985706b55c75a12281ec811ba9e0c2ce25ee2b1") syz_clone(0x4001000, &(0x7f0000001980)="fa8b9bbb7f941659a6ec18db9c1b147840ab112202444c5a0d035cc0bbd81698385ffd193473d6609dd1e7d3dc524c6f4bfcec6c1722a739444e9fc23c94146ca37ca2f4e60bd2aaadbd1f2b3ede5d956388520b64e3f3f05f70fd16e36ff00a6eebc934dfd277b526c7b4fbeb89be6b788a95f944e4a1864608268f68c2fc7f955c8c3f6aeaece2d0c5fb5353f30b047831a7dcf92a6a33b210af9e4ab55555007a59bc2dc10548e6987d03ceab32da1308", 0xb2, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)="39553b39263f64c92675a215dcd51d1beca8f1371a9382beeb8daa6798a744710ebb5e101d9de958129b70fdb0d032e9a2b822049530757f369806139b2ac1a9086939d9e2f8c3ccb97333dd05faefa83a2852") r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d00)={0xffffffffffffffff, 0x3843650e, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001e40)={r1, &(0x7f0000001d40)="d8d7c51a060a2e141b13220c883d89a391daa271e520f8b1337f2052d42aafdc9a87283bc3c527b89d1ad5fdabfd64e8e01904dbe7b6b2e33194c589aa8b08117d5fe6834ae8a7ccde83eee90dbf2b280bf83d092e64af2870fdbe046a5e13878d515191164a80885da48193711f3b58d9097a54e6e466ed2298a51c566f838981aaaf534ab76cbeff9f9f1031614747285c9cfe9a2a5dbb32a4dac22f48d8af66fd59ca690c26637989129d7e745f", &(0x7f0000001e00)=""/12}, 0x20) unlink(&(0x7f0000001c40)='./file0\x00') 13:56:27 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) [ 803.659767][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.684280][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:27 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48}) 13:56:27 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000380)='syzkaller\x00'}, 0x90) [ 803.718828][ T27] usb 4-1: config 0 descriptor?? 13:56:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) [ 804.284087][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 804.290093][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 804.304199][ T27] usb 4-1: USB disconnect, device number 63 13:56:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:28 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)={@cgroup, 0xffffffffffffffff, 0x1b}, 0x20) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48}) 13:56:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001fc0)=""/159, 0x1000000, 0x9f, 0x1}, 0x20) 13:56:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300), 0x8) 13:56:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='9', 0x1}], 0x1}, 0x0) 13:56:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) 13:56:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xfffffffffffffcc5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) [ 805.064009][ T27] usb 4-1: new high-speed USB device number 64 using dummy_hcd 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 0: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 805.324191][T29925] usb 3-1: new high-speed USB device number 50 using dummy_hcd 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 0: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) [ 805.377372][T32230] usb 5-1: new high-speed USB device number 10 using dummy_hcd 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 0: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) [ 805.464909][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.481876][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 805.506038][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:56:28 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) [ 805.520138][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.534123][ T27] usb 4-1: config 0 descriptor?? 13:56:28 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:28 executing program 1: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:29 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:29 executing program 1: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:29 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:29 executing program 1: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) [ 805.724218][T29925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.744941][T29925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 805.754032][T32230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.754059][T32230] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 805.754099][T32230] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.754122][T32230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.765502][T29925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.801436][T29925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.803595][T32230] usb 5-1: config 0 descriptor?? [ 805.828936][T29925] usb 3-1: config 0 descriptor?? [ 806.106367][T32230] usb 5-1: string descriptor 0 read error: -71 [ 806.114245][T32230] usb 5-1: USB disconnect, device number 10 [ 806.124566][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 806.130809][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 806.143469][ T27] usb 4-1: USB disconnect, device number 64 [ 806.374103][T29925] usb 3-1: string descriptor 0 read error: -71 [ 806.389715][T29925] usb 3-1: USB disconnect, device number 50 13:56:29 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:29 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:29 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, 0x0, 0x0, 0x9}) 13:56:29 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:29 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) [ 806.847273][T32230] usb 4-1: new high-speed USB device number 65 using dummy_hcd 13:56:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48}) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r1, 0x0, 0x3, 0x7fffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x9, 0x6}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {0xffffffffffffffff, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {0xffffffffffffffff, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) [ 807.254071][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.276605][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, r1, 0x373e00}) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {0xffffffffffffffff, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) [ 807.295549][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 807.306356][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.317677][T32230] usb 4-1: config 0 descriptor?? 13:56:30 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:30 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) [ 807.365274][T29925] usb 1-1: new high-speed USB device number 55 using dummy_hcd 13:56:30 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) [ 807.744018][T29925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.754298][T29925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 807.763374][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 807.772579][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.791726][T29925] usb 1-1: config 0 descriptor?? [ 807.844505][T32230] usbhid 4-1:0.0: can't add hid device: -71 [ 807.850521][T32230] usbhid: probe of 4-1:0.0 failed with error -71 [ 807.863309][T32230] usb 4-1: USB disconnect, device number 65 13:56:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 808.334076][T29925] usb 1-1: string descriptor 0 read error: -71 [ 808.349488][T29925] usb 1-1: USB disconnect, device number 55 13:56:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r2, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r1, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:31 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{r0, 0x1001}, {r0, 0x8000}, {r1, 0x1082}, {r0, 0x300}, {r0, 0x120}, {r0, 0x6284}, {r0, 0x2}, {r0, 0x9621}, {r0, 0x20a}, {r0, 0x80}], 0xa, 0x5) 13:56:31 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:31 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x100) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) 13:56:32 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 808.664736][T32230] usb 4-1: new high-speed USB device number 66 using dummy_hcd 13:56:32 executing program 4: r0 = syz_open_dev$media(0x0, 0x1, 0x100) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) 13:56:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:32 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r0, r0, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:32 executing program 4: r0 = syz_open_dev$media(0x0, 0x1, 0x100) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) 13:56:32 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r0, r0, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:32 executing program 4: r0 = syz_open_dev$media(0x0, 0x1, 0x100) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) 13:56:32 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r0, r0, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x100) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) [ 809.060652][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.067363][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.074139][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.089687][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:32 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}, {0xffffffffffffffff, 0x80}], 0xa, 0x5) [ 809.102787][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.115519][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.127361][T32230] usb 4-1: config 0 descriptor?? 13:56:32 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 809.204370][ T5222] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 809.604167][ T5222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.616135][ T5222] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.626760][ T5222] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.637020][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.648546][ T5222] usb 1-1: config 0 descriptor?? [ 809.684140][T32230] usbhid 4-1:0.0: can't add hid device: -71 [ 809.691628][T32230] usbhid: probe of 4-1:0.0 failed with error -71 [ 809.702808][T32230] usb 4-1: USB disconnect, device number 66 13:56:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(0x0, 0x0, 0x5) 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(0x0, 0x0, 0x5) 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 810.190493][ T5222] usb 1-1: string descriptor 0 read error: -71 [ 810.216828][ T5222] usb 1-1: USB disconnect, device number 56 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(0x0, 0x0, 0x5) 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}, {0xffffffffffffffff, 0x20a}], 0x9, 0x5) 13:56:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x9621}], 0x8, 0x5) 13:56:33 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) [ 810.475212][T29925] usb 4-1: new high-speed USB device number 67 using dummy_hcd 13:56:33 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x22, 0x0, 0x3ff}) 13:56:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}, {0xffffffffffffffff, 0x2}], 0x7, 0x5) 13:56:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}, {0xffffffffffffffff, 0x6284}], 0x6, 0x5) 13:56:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 13:56:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) 13:56:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x120}], 0x5, 0x5) 13:56:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) 13:56:34 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) [ 810.884407][T29925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.919288][T29925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}, {0xffffffffffffffff, 0x300}], 0x4, 0x5) 13:56:34 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) [ 810.936946][T29925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.948066][T29925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.975185][T29925] usb 4-1: config 0 descriptor?? [ 811.023972][ T5222] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 811.384103][ T5222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.394529][ T5222] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.405319][ T5222] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.414610][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.427621][ T5222] usb 1-1: config 0 descriptor?? [ 811.524167][T29925] usbhid 4-1:0.0: can't add hid device: -71 [ 811.530242][T29925] usbhid: probe of 4-1:0.0 failed with error -71 [ 811.541748][T29925] usb 4-1: USB disconnect, device number 67 13:56:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:35 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0, 0x1082}], 0x3, 0x5) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) [ 811.970407][ T5222] usb 1-1: string descriptor 0 read error: -71 [ 811.998161][ T5222] usb 1-1: USB disconnect, device number 57 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:35 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}], 0x2, 0x5) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}], 0x2, 0x5) 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) 13:56:35 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}], 0x2, 0x5) 13:56:35 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe99}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={'hmac(sha1)\x00'}}) [ 812.367852][T32230] usb 4-1: new high-speed USB device number 68 using dummy_hcd 13:56:35 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x1082}], 0x3, 0x5) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4004af61, 0x0) 13:56:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 13:56:35 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x1082}], 0x3, 0x5) 13:56:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}}], 0x1, 0x0) 13:56:35 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:36 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 13:56:36 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:36 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x1082}], 0x3, 0x5) 13:56:36 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 13:56:36 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:36 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {r0}], 0x3, 0x5) 13:56:36 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) [ 812.744317][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.767653][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.804011][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.824103][ T8] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 812.834894][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.856145][T32230] usb 4-1: config 0 descriptor?? [ 813.204061][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.215790][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.225211][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.236385][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.247683][ T8] usb 1-1: config 0 descriptor?? [ 813.404049][T32230] usbhid 4-1:0.0: can't add hid device: -71 [ 813.410042][T32230] usbhid: probe of 4-1:0.0 failed with error -71 [ 813.421065][T32230] usb 4-1: USB disconnect, device number 68 [ 813.784246][ T8] usb 1-1: string descriptor 0 read error: -71 [ 813.801750][ T8] usb 1-1: USB disconnect, device number 58 13:56:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:37 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {r0}], 0x2, 0x5) 13:56:37 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {}], 0x2, 0x5) 13:56:37 executing program 1: connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {}], 0x2, 0x5) 13:56:37 executing program 1: connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1001}, {}], 0x2, 0x5) 13:56:37 executing program 1: connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) 13:56:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x5) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, r1, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) [ 814.164107][ T5222] usb 4-1: new high-speed USB device number 69 using dummy_hcd 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{}], 0x1, 0x5) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, r1, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, 0x0, r1, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{}], 0x1, 0x5) 13:56:37 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) 13:56:37 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{}], 0x1, 0x5) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) 13:56:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, 0x22, 0x0, 0x3ff}) 13:56:37 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) 13:56:37 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, 0x22, 0x0, 0x3ff}) [ 814.574856][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.590688][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.605863][ T5222] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.615222][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.624622][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 814.639129][ T5222] usb 4-1: config 0 descriptor?? [ 814.984901][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.995179][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.005433][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 815.014560][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.024386][ T8] usb 1-1: config 0 descriptor?? [ 815.394118][ T5222] usbhid 4-1:0.0: can't add hid device: -71 [ 815.400145][ T5222] usbhid: probe of 4-1:0.0 failed with error -71 [ 815.408984][ T5222] usb 4-1: USB disconnect, device number 69 [ 815.564188][ T8] usb 1-1: string descriptor 0 read error: -71 [ 815.572166][ T8] usb 1-1: USB disconnect, device number 59 13:56:39 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0a012e"], 0xa) 13:56:39 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x0, 0x0, 0x3ff}) 13:56:39 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) 13:56:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:39 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x8000, 0x1000, 0xfffffffa}, 0x20) 13:56:39 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x0, 0x0, 0x3ff}) 13:56:39 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x0, 0x0, 0x3ff}) 13:56:39 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x60080000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 13:56:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 816.007668][ T1948] loop4: detected capacity change from 0 to 1024 13:56:39 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r1, r1, 0x22}) 13:56:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x40000}, 0x0) [ 816.334333][T32230] usb 4-1: new high-speed USB device number 70 using dummy_hcd 13:56:39 executing program 2: mkdir(&(0x7f0000000700)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) [ 816.896549][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.938847][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:40 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:40 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 817.010085][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 817.069342][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.069479][ T1970] loop2: detected capacity change from 0 to 1024 [ 817.085291][T29925] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 817.103208][T32230] usb 4-1: config 0 descriptor?? [ 817.287498][ T1972] loop4: detected capacity change from 0 to 1024 13:56:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 819.275167][ T1980] hfsplus: xattr search failed [ 819.281394][ T1981] hfsplus: xattr search failed [ 819.287586][ T1982] hfsplus: xattr search failed [ 819.315378][T29925] usb 1-1: device descriptor read/all, error -71 [ 819.343796][ T1976] hfsplus: xattr search failed [ 819.351536][ T1977] hfsplus: xattr search failed [ 819.359230][ T1979] hfsplus: xattr search failed 13:56:42 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:42 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 819.551827][ T1990] loop4: detected capacity change from 0 to 1024 [ 819.607482][ T1992] loop2: detected capacity change from 0 to 1024 [ 820.124850][T29925] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 821.624444][ T1997] hfsplus: xattr search failed [ 821.761607][ T1999] hfsplus: xattr search failed 13:56:45 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 821.972011][ T2000] hfsplus: xattr search failed [ 821.979818][ T2001] hfsplus: xattr search failed [ 821.986178][ T2002] hfsplus: xattr search failed 13:56:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:45 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 822.164828][T32230] usbhid 4-1:0.0: can't add hid device: -71 [ 822.170885][T32230] usbhid: probe of 4-1:0.0 failed with error -71 [ 822.187944][T32230] usb 4-1: USB disconnect, device number 70 [ 822.273716][ T2010] loop4: detected capacity change from 0 to 1024 [ 822.334184][T29925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.357216][T29925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 822.368954][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.381671][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 822.432983][T29925] usb 1-1: config 0 descriptor?? [ 822.472927][ T2012] loop2: detected capacity change from 0 to 1024 [ 822.484365][T29925] usb 1-1: can't set config #0, error -71 [ 822.540982][T29925] usb 1-1: USB disconnect, device number 61 [ 822.849210][T32230] usb 4-1: new high-speed USB device number 71 using dummy_hcd 13:56:46 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 823.804266][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.154893][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 824.197765][ T2023] loop4: detected capacity change from 0 to 1024 [ 824.211855][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.287831][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:47 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 824.463967][T29925] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 824.519207][T32230] usb 4-1: config 0 descriptor?? 13:56:48 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 825.420292][ T2032] loop2: detected capacity change from 0 to 1024 [ 825.684036][T29925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.709131][ T2035] loop4: detected capacity change from 0 to 1024 [ 825.714707][T29925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.994445][T32230] usbhid 4-1:0.0: can't add hid device: -71 [ 826.198229][T32230] usbhid: probe of 4-1:0.0 failed with error -71 13:56:49 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 826.413708][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.435310][T32230] usb 4-1: USB disconnect, device number 71 [ 826.465387][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:50 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 827.351112][T29925] usb 1-1: config 0 descriptor?? [ 827.369646][ T2044] loop2: detected capacity change from 0 to 1024 13:56:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 827.623941][T29925] usb 1-1: string descriptor 0 read error: -71 [ 827.631944][T29925] usb 1-1: USB disconnect, device number 62 [ 828.333607][ T2056] loop4: detected capacity change from 0 to 1024 13:56:51 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 828.554006][ T5222] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 828.635405][ T2059] loop2: detected capacity change from 0 to 1024 [ 828.663932][T29925] usb 1-1: new high-speed USB device number 63 using dummy_hcd 13:56:52 executing program 1: sendmsg$inet(0xffffffffffffffff, 0x0, 0x4d7ca769f3353c39) 13:56:52 executing program 4: r0 = syz_io_uring_setup(0x2ad3, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000018c0)=[r0], 0x1) [ 829.541324][T29925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.553227][T29925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.564841][T29925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 829.573980][T29925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:56:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 829.597089][T29925] usb 1-1: config 0 descriptor?? 13:56:53 executing program 4: syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=[0x0], 0x1}, 0x58) [ 830.019499][ T2074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:56:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:53 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 830.245232][ T2083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 830.246572][T29925] usb 1-1: string descriptor 0 read error: -71 [ 830.274092][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.283959][T29925] usb 1-1: USB disconnect, device number 63 13:56:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 830.290564][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.304020][ T5222] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.317858][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.328455][ T5222] usb 4-1: config 0 descriptor?? [ 830.389769][ T2086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) [ 830.456826][ T2089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 830.459066][ T2088] loop2: detected capacity change from 0 to 1024 13:56:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0xe8) [ 830.705317][ T2096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 830.744055][ T5222] usbhid 4-1:0.0: can't add hid device: -71 13:56:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:56:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=@delchain={0x24, 0x5a, 0x1}, 0x24}}, 0x0) [ 830.750121][ T5222] usbhid: probe of 4-1:0.0 failed with error -71 [ 830.766770][ T5222] usb 4-1: USB disconnect, device number 72 [ 831.154248][ T5222] usb 4-1: new high-speed USB device number 73 using dummy_hcd 13:56:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 831.411820][ T2105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:54 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 13:56:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 831.483097][ T2107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.578134][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.604044][T32230] usb 1-1: new high-speed USB device number 64 using dummy_hcd 13:56:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 831.645307][ T2116] loop2: detected capacity change from 0 to 1024 [ 831.674014][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.707392][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 831.729685][ T5222] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.745934][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.762414][ T2119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.785283][ T5222] usb 4-1: config 0 descriptor?? 13:56:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 831.959842][ T2123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:56:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:56 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 832.684849][T32230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.706797][T32230] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 832.716635][T32230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 832.726756][T32230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.739107][T32230] usb 1-1: config 0 descriptor?? 13:56:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) 13:56:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) [ 832.923134][ T2142] loop2: detected capacity change from 0 to 1024 [ 832.994214][ T5222] usbhid 4-1:0.0: can't add hid device: -71 [ 833.000425][ T5222] usbhid: probe of 4-1:0.0 failed with error -71 [ 833.041880][ T5222] usb 4-1: USB disconnect, device number 73 13:56:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) 13:56:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:56:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 13:56:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:57 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:56:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100", @ANYRES16], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 833.964653][T32230] usb 1-1: string descriptor 0 read error: -71 [ 833.975892][T32230] usb 1-1: USB disconnect, device number 64 13:56:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 13:56:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) [ 834.152204][ T2176] loop2: detected capacity change from 0 to 1024 13:56:57 executing program 4: r0 = open(0x0, 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:57 executing program 4: r0 = open(0x0, 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 834.443909][ T5135] usb 4-1: new high-speed USB device number 74 using dummy_hcd 13:56:57 executing program 4: r0 = open(0x0, 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 834.864324][ T5135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.025696][ T2196] __nla_validate_parse: 2 callbacks suppressed [ 835.025716][ T2196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 835.044306][ T5135] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:56:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 835.098343][ T5135] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:56:58 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 835.140609][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.159755][T32230] usb 1-1: new high-speed USB device number 65 using dummy_hcd 13:56:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 835.215821][ T5135] usb 4-1: config 0 descriptor?? 13:56:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 13:56:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 835.314538][ T2206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 835.390031][ T2214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:56:58 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 835.436044][ T2213] loop2: detected capacity change from 0 to 1024 [ 835.524304][T32230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.563514][T32230] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 13:56:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 835.628944][T32230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:56:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:59 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 835.680940][T32230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.712876][T32230] usb 1-1: config 0 descriptor?? 13:56:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:59 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) [ 836.314052][ T5135] usbhid 4-1:0.0: can't add hid device: -71 [ 836.328592][ T5135] usbhid: probe of 4-1:0.0 failed with error -71 13:56:59 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 836.388998][ T5135] usb 4-1: USB disconnect, device number 74 13:56:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:56:59 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) [ 836.602708][ T2239] loop2: detected capacity change from 0 to 1024 13:57:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:00 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 13:57:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:00 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 13:57:00 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) [ 837.501871][ T2262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:01 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:01 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 837.644206][T32230] usb 1-1: string descriptor 0 read error: -71 [ 837.652499][T32230] usb 1-1: USB disconnect, device number 65 13:57:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) [ 837.722597][ T2267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 837.765244][T32762] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 837.836057][ T2274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.852794][ T2271] loop2: detected capacity change from 0 to 1024 13:57:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) 13:57:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 838.087636][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:57:02 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:02 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:57:02 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 838.884023][T32762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.898568][T32762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.913212][T32762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.923550][T32762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.935885][T32762] usb 4-1: config 0 descriptor?? 13:57:02 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) [ 838.959703][ T2302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 839.019259][T29925] IPVS: starting estimator thread 0... [ 839.059222][ T2308] loop2: detected capacity change from 0 to 1024 13:57:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x48, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}}, 0x0) [ 839.216865][ T2306] IPVS: using max 17 ests per chain, 40800 per kthread 13:57:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 839.307924][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:03 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x48, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}}, 0x0) [ 839.974431][ T2323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:03 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 840.080138][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.090431][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.098385][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.105881][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.113645][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 13:57:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x0, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) 13:57:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 840.123358][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.131175][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.139859][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.153188][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.172743][T32762] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 840.191811][T32762] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 840.213037][T32762] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 840.256815][T32762] usb 4-1: USB disconnect, device number 75 [ 840.267657][ T2340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 840.315796][ T2341] loop2: detected capacity change from 0 to 1024 13:57:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=@delchain={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 13:57:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:03 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x7f, 0x4, @vifc_lcl_addr=@multicast2, @remote}, 0x10) [ 840.569786][ T2348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 841.210896][ T2358] dvmrp1: entered allmulticast mode 13:57:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = io_uring_setup(0x354a, &(0x7f0000000100)) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 13:57:04 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=@delchain={0x24, 0x5f, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}}, 0x24}}, 0x0) [ 841.427435][ T2368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 841.479082][ T8] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 841.517833][ T2371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 841.550207][ T2372] loop2: detected capacity change from 0 to 1024 [ 841.694974][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000100)=0xfffffbff, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='f', 0x1}], 0x1}, 0x0) [ 841.874630][ T2382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.074333][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 13:57:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 842.429173][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:57:05 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="b1", 0x1, 0x0, 0x0, 0x0) [ 842.517570][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:57:05 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 842.593968][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.628810][ T2394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.639164][ T8] usb 4-1: config 0 descriptor?? 13:57:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, 0x14) [ 842.760917][ T2399] loop2: detected capacity change from 0 to 1024 13:57:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)='f', 0x1}], 0x1}, 0x0) 13:57:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 842.878505][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001900)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000240)="7e4015c16311791bf60aecda795b9a3345a572b27b33e84bf624d8", 0x1b}, {&(0x7f0000000400)="23fcdf1565d86177a57ce89cc78124b3b32f62c1ab9e508f0096c63e48cf9ac3c7704be2fcd7ec4a63671ace500cccff2afdb14c17bbb598aeec87d78d1482362c90a959f20046db12501f8956bf0219e5fdf8c094e193867189d50d7180c3ad2bdc02ef6fdaa1c118f29c5bb65573d3e5e6c1aaf7b08b238c12a8416df27918c6445e9e489a5b4fab0ad52c94afc69f0eee796ff4ebd4655c2652f0705bf836ae64f1eb6bb0f71d1a5f327de1f466639621dfbac532cb8048daf437ce9828ad19", 0xc1}, {&(0x7f0000000500)="63218b15e9a4120124dff42a9df9f2f43a40e4544854c5ffb9b3c7e7dddf3e4f32bb1bdacd8ff449aa6f0df04634c2b49218b5e92190f7fcbe2554ad76418639c58871ce8760f85cbae5c611e55d114d939a528815eee0679b147204f5406129f145203c99be6b2f85d43dceb4e4b0f977733fb175cd79b471141e4965e551bc4a2b2da27e6cc400b768b2b55cbf9a49610d3a8ba3c0a4", 0x97}, {&(0x7f00000005c0)="fa90b89eb52596d31e6361fd95f8946cc5ab14f7ed75ecb6f53374ea8a17e5275411d555e1d3e07e47781ecc8d251a953752aed115d6df59c87a308dc79977ca78edee449b5e87096da8a1425797f864427472abc994dc7d3255fb5282ae512d4726c76d73b45fa9f584672df426f5dbcc94838e8b5a1003e0c2f4c6c64b367dcf88439949e7f98ba526d2b4e5ee3fb9d154566580ad6d", 0x97}, {&(0x7f0000000680)="3f574b744b6f65c29ff2dac1697e8048c3d151498fe3d16efe35598cf87563eadf1c2b835b5baa6b25cf6f8c8a4f927ffc573be787f13833f4379c32e926ffac77531509647f7704e93224c5bbda84b8cc6bd8658feb70b97cab8ac46fc55e16ee74909c94e12ad5b23bd50022c384e0078b5d6b2c464baec01b5f61c3e6631efa273bddc72f308d1b60daea4cd800589a8eb8db23b1277f0f86a1f98f9516f665a6a31a3a9dcc64e3572a07d62635dacb50161d597ae45eeae70430401a90df327650c817bb126e51749a386e", 0xcd}, {&(0x7f0000000780)="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", 0xdba}], 0x6, &(0x7f00000018c0)=[@prinfo={0x14}], 0x14}, 0x0) [ 843.031643][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 843.470563][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 13:57:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 843.657278][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 843.696066][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 13:57:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x3, 0x84) shutdown(r0, 0x0) 13:57:07 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 843.736055][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 13:57:07 executing program 4: r0 = open$dir(&(0x7f0000000540)='./file0\x00', 0xa04, 0x0) lseek(r0, 0xffffffffffffffff, 0x4) [ 843.790977][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 843.830935][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 13:57:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000100)={0x8000}, 0x8) [ 843.858918][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 843.879706][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 843.892926][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 13:57:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 843.907986][ T8] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 843.933626][ T8] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving 13:57:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 843.966417][ T8] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 844.024383][ T8] usb 4-1: USB disconnect, device number 76 [ 844.051783][ T2428] loop2: detected capacity change from 0 to 1024 13:57:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:07 executing program 4: getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setregid(r0, 0xffffffffffffffff) 13:57:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 844.646895][T32762] usb 4-1: new high-speed USB device number 77 using dummy_hcd 13:57:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:08 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000dc0)={&(0x7f0000000680)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000006c0)='T', 0x1}], 0x1, &(0x7f0000000840)=[{0xc}, {0xc}, {0xc}], 0x24}, 0x0) 13:57:08 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:08 executing program 4: r0 = socket$inet6(0x1c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 13:57:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 845.264411][T32762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.272769][ T2463] loop2: detected capacity change from 0 to 1024 [ 845.285031][ T27] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 845.294869][ T2466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.304144][T32762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 845.304199][T32762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 845.304223][T32762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.309892][T32762] usb 4-1: config 0 descriptor?? 13:57:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:08 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @val, {@ipv6}}, 0x0) 13:57:08 executing program 4: r0 = socket(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000001380)={0x1c, 0x1c, 0x3}, 0x1c) [ 845.582188][ T2472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), 0x90) 13:57:09 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 846.321252][ T2482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.334225][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.347222][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.355350][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 13:57:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000100)={0x5}, 0x8) dup2(r0, r1) [ 846.364618][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.372176][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.385824][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 846.396525][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.405097][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:57:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 846.420466][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.435289][ T27] usb 1-1: config 0 descriptor?? [ 846.442154][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.471075][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.482390][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 13:57:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000100)={0x5}, 0x8) dup2(r0, r1) [ 846.522932][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.535439][T32762] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 846.552251][T32762] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 846.565292][ T2491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.569853][ T2488] loop2: detected capacity change from 0 to 1024 [ 846.583220][T32762] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 846.647845][T32762] usb 4-1: USB disconnect, device number 77 13:57:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000000c0)={0x705e}, 0x8) 13:57:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="e6", 0x1}], 0x1}, 0x0) [ 846.889703][ T2500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="e6", 0x1}], 0x1}, 0x0) 13:57:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:10 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x3, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003980)={&(0x7f0000002740)=@in={0x10, 0x2}, 0x10, &(0x7f0000003900)=[{&(0x7f0000002780)="6af41fba1824f8cb551c8b1162feedb0920c86410acab38b9188168b9acd2a4904d096b27b976a935f6fc25f739d3ac2a50f6b48750347b6fa978e9fb6aefb19ef33ac41e6dc2a6d622b2e823f0655d736e0dfa95e1ecff8a450dd4768d4a4ba4ffecfac8ff4b81e158c1538854dd55ca4eccd5a7878849c720b046a8108141864a9bb930493bd585687a70743f8cf08d9e0324924d3e34947b9bd27105658f3efba4da1bca042547a71c5dde474801e68886e6b0fccb402e976d6df77d949a8a9831c376169a61f7fdf0392eadd456ed4347ae555a34a467ed4d6ad0ee9de18db36e7619c1769491d35279bdf8caf02", 0xf0}, {&(0x7f0000002880)="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", 0x4b1}], 0x2}, 0x0) 13:57:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 847.623690][ T2512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="e6", 0x1}], 0x1}, 0x0) [ 847.778305][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 847.812955][ T2518] loop2: detected capacity change from 0 to 1024 13:57:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 13:57:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 847.936099][ T2524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 848.035095][ T8] usb 1-1: USB disconnect, device number 66 [ 848.118257][T32762] usb 4-1: new high-speed USB device number 78 using dummy_hcd 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:12 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000400)={@broadcast, @local, @val, {@ipv4}}, 0x0) [ 848.725003][T32762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 13:57:12 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 848.776523][T32762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.790172][ T2533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:12 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 848.846513][T32762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.869322][T32762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.914241][T32762] usb 4-1: config 0 descriptor?? 13:57:12 executing program 4: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x989680}) 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 849.001055][ T2542] loop2: detected capacity change from 0 to 1024 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:12 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x80842, 0x0) 13:57:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 849.295221][ T8] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 849.855710][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 13:57:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) 13:57:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 849.924137][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.964067][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 13:57:13 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 849.994238][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.006475][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.014030][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.021475][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.031271][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 13:57:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r1, 0x225, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x20}}]}, 0x34}}, 0x0) [ 850.042492][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.043924][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.074171][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.081617][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.087182][ T8] usb 1-1: config 0 descriptor?? [ 850.143389][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 850.177650][T32762] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 13:57:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x2c46, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) [ 850.198734][T32762] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving 13:57:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 850.238596][T32762] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 850.280546][ T2570] loop2: detected capacity change from 0 to 1024 [ 850.302672][T32762] usb 4-1: USB disconnect, device number 78 13:57:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 850.568121][ T2580] loop4: detected capacity change from 0 to 512 [ 850.605125][ T2580] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 850.623258][ T2580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.642126][ T2580] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz-executor.4: Logical block already allocated 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 850.697819][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 850.844529][ T2595] loop4: detected capacity change from 0 to 512 [ 850.873030][ T2595] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 850.919472][ T2595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.923902][T32762] usb 4-1: new high-speed USB device number 79 using dummy_hcd 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 850.958991][ T2595] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz-executor.4: Logical block already allocated 13:57:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 851.020124][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.212177][ T2605] loop4: detected capacity change from 0 to 512 [ 851.246857][ T2605] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 851.258691][ T2605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.282121][ T2605] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz-executor.4: Logical block already allocated [ 851.311019][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.324067][T32762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.335686][T32762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 851.350051][T32762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.359451][T32762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.371628][T32762] usb 4-1: config 0 descriptor?? 13:57:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:14 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 851.461820][ T5135] usb 1-1: USB disconnect, device number 67 13:57:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 851.551047][ T2615] loop2: detected capacity change from 0 to 1024 [ 851.558887][ T2617] loop4: detected capacity change from 0 to 512 [ 851.584977][ T2617] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 851.598833][ T2617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 851.705531][ T2617] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz-executor.4: Logical block already allocated 13:57:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 851.801726][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 851.912436][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 851.934950][ T5135] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 851.945829][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 851.961521][ T2627] loop4: detected capacity change from 0 to 512 [ 851.968852][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 851.986622][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.000976][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.014163][ T2630] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.024664][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.033707][ T2627] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 852.044893][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.049656][ T2627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 852.070630][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.081633][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.097702][T32762] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 852.112590][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.114950][T32762] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 852.170134][ T2634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.175021][T32762] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 852.207822][T32762] usb 4-1: USB disconnect, device number 79 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 852.291122][ T2636] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.321482][ T2638] loop4: detected capacity change from 0 to 512 [ 852.329062][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.343145][ T5135] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 852.352438][ T5135] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.363699][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.374866][ T5135] usb 1-1: config 0 descriptor?? 13:57:15 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 852.436153][ T2638] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 852.465492][ T2638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 852.519907][ T2641] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.549741][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 852.570669][ T2643] loop2: detected capacity change from 0 to 1024 [ 852.683960][ T2646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 852.720445][ T2647] loop4: detected capacity change from 0 to 512 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 852.802902][ T2647] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:16 executing program 4: r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 852.844769][ T2647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.866772][ T2650] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 852.922968][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.970418][ T2655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:16 executing program 4: r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:16 executing program 4: r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 853.119351][ T2662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") r0 = socket(0x0, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 853.173979][T32230] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 853.200142][ T2666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.285656][ T2669] loop4: detected capacity change from 0 to 512 [ 853.295696][ T2670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.324891][ T2669] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 853.337316][ T2669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:16 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x0, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 853.544205][T32230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.561744][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.568922][T32230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 853.586080][T32230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 853.595886][T32230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.625798][T32230] usb 4-1: config 0 descriptor?? [ 853.648696][ T2682] loop2: detected capacity change from 0 to 1024 [ 853.759061][ T2686] loop4: detected capacity change from 0 to 512 [ 853.837050][ T2686] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 853.883604][ T2686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 854.002017][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.117339][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.131784][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.139627][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.150810][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.158591][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.167560][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.175383][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.182952][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.190600][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.198213][T32230] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 854.206944][T32230] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 854.219762][T32230] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 854.406805][ T8] usb 4-1: USB disconnect, device number 80 13:57:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x0, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:17 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 854.526120][T32762] usb 1-1: USB disconnect, device number 68 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 854.610997][ T2703] loop4: detected capacity change from 0 to 512 [ 854.648891][ T2703] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 854.686297][ T2706] loop2: detected capacity change from 0 to 1024 [ 854.687668][ T2703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.835473][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") r0 = socket(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.102511][ T2722] loop4: detected capacity change from 0 to 512 [ 855.121726][ T2722] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 855.133372][ T2722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.146194][T32762] usb 1-1: new high-speed USB device number 69 using dummy_hcd 13:57:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.237894][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.324052][ T8] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 855.364013][T32762] usb 1-1: device descriptor read/64, error -71 [ 855.381129][ T2738] loop4: detected capacity change from 0 to 512 [ 855.415999][ T2738] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 855.432928][ T2738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.487619][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:18 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.714075][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.720185][ T2753] loop4: detected capacity change from 0 to 512 [ 855.734197][T32762] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 855.753310][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 855.772968][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 855.783498][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.792338][ T2752] loop2: detected capacity change from 0 to 1024 [ 855.840515][ T2753] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 855.933406][ T2753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.945804][T32762] usb 1-1: device descriptor read/64, error -71 13:57:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") socket(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 856.014545][ T8] usb 4-1: config 0 descriptor?? 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.046774][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.105458][T32762] usb usb1-port1: attempt power cycle 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.185267][ T2765] loop4: detected capacity change from 0 to 512 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") socket(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 856.235586][ T2765] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 856.258415][ T2765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.319175][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.462633][ T2778] loop4: detected capacity change from 0 to 512 [ 856.500104][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.501048][ T2778] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 856.511367][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 13:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 856.554136][T32762] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 856.578741][ T2778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:20 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 856.629066][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.636618][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.644116][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.651541][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.659548][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.667347][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.677222][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.684732][ T8] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 856.693146][ T8] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 856.694166][T32762] usb 1-1: device descriptor read/8, error -71 [ 856.721728][ T8] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 856.765867][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.782377][ T8] usb 4-1: USB disconnect, device number 81 [ 856.812975][ T2785] loop2: detected capacity change from 0 to 1024 [ 857.193412][T32762] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 857.364501][T32762] usb 1-1: device descriptor read/8, error -71 [ 857.554011][T32762] usb usb1-port1: unable to enumerate USB device 13:57:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") socket(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:21 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff0000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 857.794439][ T2791] __nla_validate_parse: 16 callbacks suppressed [ 857.794460][ T2791] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 857.866389][ T2795] loop4: detected capacity change from 0 to 512 [ 857.889599][ T2797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff0000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 857.920590][ T2795] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff0000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 857.975019][ T2795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.006884][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 858.012242][ T2800] loop2: detected capacity change from 0 to 1024 13:57:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) [ 858.061957][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.086076][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 858.172037][ T2806] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 858.279336][ T2808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 858.290825][T29925] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 858.331513][ T2811] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 858.354380][T32762] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 858.554605][T32762] usb 1-1: device descriptor read/64, error -71 [ 858.695874][T29925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 13:57:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 858.855963][T29925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.916500][T29925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.937794][ T2814] loop4: detected capacity change from 0 to 512 [ 858.952344][T29925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:57:22 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 858.989477][ T2814] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 859.000088][T32762] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 859.013928][ T2817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 859.046062][T29925] usb 4-1: config 0 descriptor?? [ 859.052486][ T2814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) [ 859.155057][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.169824][ T2822] loop2: detected capacity change from 0 to 1024 [ 859.198006][ T2823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 859.352845][ T2826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.400608][ T2828] loop4: detected capacity change from 0 to 512 [ 859.414011][T32762] usb 1-1: device descriptor read/64, error -71 [ 859.436012][ T2828] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 859.447355][ T2828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.551954][T32762] usb usb1-port1: attempt power cycle 13:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) [ 859.864568][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.890764][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.035161][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.052235][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.093059][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.102178][T32762] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 860.132623][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 13:57:23 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 860.158577][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 13:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 860.205091][T32762] usb 1-1: device descriptor read/8, error -71 [ 860.220135][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.233435][ T2836] loop4: detected capacity change from 0 to 512 [ 860.247906][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.265876][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.273482][T29925] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 860.284346][ T2836] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 860.288058][T29925] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving 13:57:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) [ 860.313064][ T2836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.369513][T29925] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 860.378688][ T2841] loop2: detected capacity change from 0 to 1024 [ 860.395711][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.464074][T29925] usb 4-1: USB disconnect, device number 82 13:57:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 860.506429][T32762] usb 1-1: new high-speed USB device number 76 using dummy_hcd 13:57:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 860.634327][T32762] usb 1-1: device descriptor read/8, error -71 [ 860.768685][T32762] usb usb1-port1: unable to enumerate USB device 13:57:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 860.884860][ T2849] loop4: detected capacity change from 0 to 512 [ 860.966253][ T2849] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.009405][ T2849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:57:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.083539][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.095021][T29925] usb 4-1: new high-speed USB device number 83 using dummy_hcd 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:24 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 861.269836][ T2862] loop4: detected capacity change from 0 to 512 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.347300][ T2862] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 861.370540][ T2862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.374336][ T5140] usb 1-1: new high-speed USB device number 77 using dummy_hcd 13:57:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 13:57:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.480967][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.505858][T29925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.526675][T29925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.546404][ T2870] loop2: detected capacity change from 0 to 1024 [ 861.553074][T29925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.571802][T29925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.606129][T29925] usb 4-1: config 0 descriptor?? 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.772089][ T5140] usb 1-1: device descriptor read/64, error -71 [ 861.795024][ T2874] loop4: detected capacity change from 0 to 512 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 861.949698][ T2874] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 4 [ 862.018533][ T2874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.096920][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 13:57:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) [ 862.139181][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 862.186824][T29922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.196927][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.207772][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.231902][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.239912][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.247942][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.258293][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.266630][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 862.278056][T29925] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 862.299642][T29925] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 862.315519][ T5140] usb 1-1: new high-speed USB device number 78 using dummy_hcd 13:57:25 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:25 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 862.452534][T29925] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 862.469895][T29925] usb 4-1: USB disconnect, device number 83 13:57:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 862.514520][ T5140] usb 1-1: device descriptor read/64, error -71 [ 862.580512][ T2893] kvm: kvm [2892]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6666666666666678 [ 862.620314][ T2896] loop2: detected capacity change from 0 to 1024 13:57:26 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 862.644406][ T5140] usb usb1-port1: attempt power cycle [ 862.804664][ T2898] __nla_validate_parse: 20 callbacks suppressed [ 862.804684][ T2898] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f00030600"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 862.942875][ T2901] kvm: kvm [2900]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6666666666666678 [ 863.020785][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 863.078147][ T5140] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 863.121461][ T2908] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:26 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 863.194321][ T8] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 863.204402][ T5140] usb 1-1: device descriptor read/8, error -71 13:57:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 863.323568][ T2912] kvm: kvm [2911]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6666666666666678 [ 863.355797][ T2915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:26 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 863.378373][ T2915] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:26 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 863.497570][ T5140] usb 1-1: new high-speed USB device number 80 using dummy_hcd 13:57:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 863.594248][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.599551][ T2923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 863.606188][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:57:27 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 863.644177][ T5140] usb 1-1: device descriptor read/8, error -71 [ 863.668043][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.682617][ T2925] loop2: detected capacity change from 0 to 1024 [ 863.746313][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.772400][ T5140] usb usb1-port1: unable to enumerate USB device [ 863.804407][ T2923] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 863.818267][ T8] usb 4-1: config 0 descriptor?? 13:57:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:28 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:28 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 864.728396][ T2939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 864.739726][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.753772][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.773057][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.788696][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.812776][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 13:57:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 864.842172][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.863650][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.880568][ T2942] loop2: detected capacity change from 0 to 1024 [ 864.887180][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.894557][ T2945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 864.910867][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.920225][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 864.930086][ T8] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 864.943446][ T8] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 13:57:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 864.984187][ T27] usb 1-1: new high-speed USB device number 81 using dummy_hcd 13:57:28 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 865.142230][ T2950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.176468][ T8] usb 4-1: USB disconnect, device number 84 [ 865.184121][ T27] usb 1-1: device descriptor read/64, error -71 13:57:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f00030600"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:29 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:29 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:29 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 866.073977][ T27] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 866.087505][ T2969] loop2: detected capacity change from 0 to 1024 13:57:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 866.224039][ T5140] usb 4-1: new high-speed USB device number 85 using dummy_hcd 13:57:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 866.394039][ T27] usb 1-1: device descriptor read/64, error -71 [ 866.516556][ T27] usb usb1-port1: attempt power cycle 13:57:30 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.024041][ T27] usb 1-1: new high-speed USB device number 83 using dummy_hcd 13:57:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:30 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:30 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.154158][ T27] usb 1-1: device descriptor read/8, error -71 13:57:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 867.264056][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.292420][ T2991] loop2: detected capacity change from 0 to 1024 13:57:30 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.312169][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:57:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 867.434077][ T27] usb 1-1: new high-speed USB device number 84 using dummy_hcd 13:57:30 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.560652][ T5140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.571264][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.576113][ T27] usb 1-1: device descriptor read/8, error -71 [ 867.583388][ T5140] usb 4-1: config 0 descriptor?? 13:57:31 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:31 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:31 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.728759][ T27] usb usb1-port1: unable to enumerate USB device 13:57:31 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.870056][ T3012] __nla_validate_parse: 10 callbacks suppressed [ 867.870074][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.886619][ T3009] loop2: detected capacity change from 0 to 1024 13:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 867.922097][ T3012] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 868.193985][ T27] usb 1-1: new high-speed USB device number 85 using dummy_hcd 13:57:31 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) [ 868.263318][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.280360][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.291069][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.301600][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.309560][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.317119][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.328591][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.346952][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.349697][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 868.357195][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.372783][ T5140] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.393267][ T5140] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving 13:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 868.434935][ T27] usb 1-1: device descriptor read/64, error -71 [ 868.444046][ T5140] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 868.515431][ T3027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.515489][ T3025] loop2: detected capacity change from 0 to 1024 [ 868.537185][ T5140] usb 4-1: USB disconnect, device number 85 13:57:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 868.670446][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.715443][ T27] usb 1-1: new high-speed USB device number 86 using dummy_hcd 13:57:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f00030600"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:32 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 868.933570][ T3038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.954196][ T27] usb 1-1: device descriptor read/64, error -71 [ 869.038024][ T3042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 869.074293][ T27] usb usb1-port1: attempt power cycle 13:57:32 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.086022][ T3044] loop2: detected capacity change from 0 to 1024 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:32 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.205105][ T5097] Bluetooth: hci0: link tx timeout [ 869.210770][ T5097] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 869.242511][ T3050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 869.294446][ T5140] usb 4-1: new high-speed USB device number 86 using dummy_hcd 13:57:32 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 869.372906][ T3055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 869.471503][ T3059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:57:32 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.537038][ T27] usb 1-1: new high-speed USB device number 87 using dummy_hcd 13:57:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e0000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:33 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.634561][ T27] usb 1-1: device descriptor read/8, error -71 13:57:33 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.677513][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.707225][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 13:57:33 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e0000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 869.721626][ T5140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.737086][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.756692][ T5140] usb 4-1: config 0 descriptor?? 13:57:33 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e0000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:33 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:33 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) [ 869.934566][ T27] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 870.044011][ T27] usb 1-1: device descriptor read/8, error -71 [ 870.076709][ T3082] loop2: detected capacity change from 0 to 1024 [ 870.158511][T29048] Bluetooth: hci0: link tx timeout [ 870.163779][T29048] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 870.184336][ T27] usb usb1-port1: unable to enumerate USB device [ 870.246627][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.260487][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.270471][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.277979][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.288840][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.296323][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.304376][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.311817][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.319299][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.328817][ T5140] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 870.339154][ T5140] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 870.354115][ T5140] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 870.496634][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.502944][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.525185][ T5140] usb 4-1: USB disconnect, device number 86 13:57:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:57:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:34 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:34 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000c80)='./bus\x00', 0x200008, &(0x7f0000000180)=ANY=[], 0x4, 0x607, &(0x7f00000004c0)="$eJzs3UtoXNcZB/D/HY9kjQuOksiJWwIVMaSlorYeKK26qVtK0SKUkC66FrYcC4+VIClFCaW4L7rtInSdLrTrqtC9IV23u2y1DBSyyaJo53Lv3JHGekwky/KM4t9PnDnnzLnn3G++uXPnIYYJ8NxanErzYYosTr21Wfa3t+ba21tzF+vhdpKy3UianSrFalJ8mtxMp+Sb5ZX19sVR+/l4ZeGdz77c/rzTa9al2r6RsaPnHc+DumQyyYW6Pmjkida7deR6x1XsZqZM2LVu4mDQHh3w4CTTT/m4BYZB0XnePGA8uZRkrH4dkPrs0Hi20T19JzrLAQAAwDn1wk52spnLg44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpP69/+LujQ6dbOYTNH9/f/Reix1+1x7OOgAAAAAAAAAAOAp+PZOdrKZy93+o6L6n//rVWeiuvxGPsh6lrOW69nMUjaykbXMJBnvWWh0c2ljY23mGDNnD505+2xuLwAAAAAAAAB8Tf0+i3v//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGFQJBc6VVUmuu3xNJpJxpKMlts9SP7TbZ9nDwcdAAAAADwDL+xkJ5u53O0/Kqr3/K9U7/vH8kFWs5GVbKSd5dyuPgvovOtvbG/Ntbe35u6X5eC6f/3fo8oxw6hWTOezh8P3fLXaopU7WamuuZ5beS/t3E6jmlm62o3n8Lh+90W59o9rx4zsdl2Xt/wvdT0cxquMjOxmZLqOrczGi/0z8ZMvTrWnmTR2P/mZOIOcX6rrbq4vnijas7Q/E7M9R98r/TORfOeff//V3fbqvbt31qeG5zB6QvszMdeTiVefq0xMV5m4sttfzM/zy0xlMm9nLSv5dZaykeVM5mdVa6k+rsvL8f6ZuvlY7+2vimS0vl86Z9GTxfR6Obf7sW9uZzlvVn+zmckPMp/5LPTcw1eO8ahvnOxRf+27daOV5M91PRzKvL7Yk9fec+54NdZ7zV6WXnr658bmt+pGuY8/1PVw2J+JmZ5MvNw/E3+rXiest1fvrd1dev+Y+3ujrssD9k9D9cxcHi8vlXdW1Xv86CjHXi7HWvvHZqqxid15jQNjV3bHxnM5K/lF3jvikTpav4Y7uNJsNfbqoWNz1djVnrHDXm8BMPQufe/SaOu/rX+3Pmn9sXW39dbYTy/+8OJroxn518iPmtMX3mi8Vvwjn+S3e+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ7f+4Uf3ltrt5bUza3R/zqn/xt1foDr7eIa7UeZgCMLQeO4bAz4xAWfuxsb992+sf/jR91fuL727/O7y6sj8/ML0wvybczfurLSXpzuXg44SOAt7T/r7R0YHExAAAAAAAAAAAADwlfp/DWCk3up0XycY8E0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrnFqTQfpsjM9PXpsr+9NdcuS7e9t2UzSSNJ8Zuk+DS5mU7JeM9yxVH7+Xhl4Z3Pvtz+fG+tZnf7Rr95/U3U9YO6ZDLJhbo+hcfWu3Xq9YrdW1gm7Fo3cTBo/w8AAP//sdwGVw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20002000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xa, &(0x7f00000000c0)={0x800, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000cc0)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000d00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x9, 0xa}, {0xff, 0xbe, 0x817, 0x8001, 0x3b}}}}, 0x17) 13:57:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 13:57:34 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f0003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 13:57:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 871.141854][ T3098] loop2: detected capacity change from 0 to 1024 13:57:34 executing program 4: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000580001c0"]) 13:57:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/18, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) [ 871.244195][ T5140] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 871.280008][T29048] Bluetooth: hci0: link tx timeout [ 871.286589][T29048] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 871.301085][T29048] ================================================================== [ 871.309171][T29048] BUG: KASAN: slab-use-after-free in hci_disconnect+0x208/0x2d0 [ 871.316911][T29048] Read of size 1 at addr ffff88801de7a039 by task kworker/u5:0/29048 [ 871.324963][T29048] [ 871.327274][T29048] CPU: 1 PID: 29048 Comm: kworker/u5:0 Not tainted 6.8.0-rc4-syzkaller-00410-gc02197fc9076 #0 [ 871.337496][T29048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 871.347543][T29048] Workqueue: hci0 hci_tx_work [ 871.352219][T29048] Call Trace: [ 871.355485][T29048] [ 871.358404][T29048] dump_stack_lvl+0x1e7/0x2e0 [ 871.363077][T29048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.368266][T29048] ? __pfx__printk+0x10/0x10 [ 871.372852][T29048] ? _printk+0xd5/0x120 [ 871.377004][T29048] ? __virt_addr_valid+0x183/0x520 [ 871.382138][T29048] ? __virt_addr_valid+0x183/0x520 [ 871.387239][T29048] print_report+0x167/0x540 [ 871.391731][T29048] ? __virt_addr_valid+0x183/0x520 [ 871.396830][T29048] ? __virt_addr_valid+0x183/0x520 [ 871.401934][T29048] ? __virt_addr_valid+0x44e/0x520 [ 871.407035][T29048] ? __phys_addr+0xba/0x170 [ 871.411526][T29048] ? hci_disconnect+0x208/0x2d0 [ 871.416370][T29048] kasan_report+0x142/0x180 [ 871.420884][T29048] ? hci_disconnect+0x208/0x2d0 [ 871.425729][T29048] hci_disconnect+0x208/0x2d0 [ 871.430398][T29048] ? __pfx_hci_disconnect+0x10/0x10 [ 871.435585][T29048] ? hci_sched_esco+0x336/0x440 [ 871.440430][T29048] ? __rcu_read_unlock+0xa0/0x110 [ 871.445456][T29048] ? __check_timeout+0x184/0x560 [ 871.450384][T29048] __check_timeout+0x3a8/0x560 [ 871.455138][T29048] ? __check_timeout+0x184/0x560 [ 871.460066][T29048] hci_tx_work+0x139b/0x1ef0 [ 871.464647][T29048] ? __pfx_lock_acquire+0x10/0x10 [ 871.469663][T29048] ? __pfx_hci_tx_work+0x10/0x10 [ 871.474594][T29048] ? process_scheduled_works+0x825/0x1420 [ 871.480329][T29048] process_scheduled_works+0x913/0x1420 [ 871.485883][T29048] ? __pfx_process_scheduled_works+0x10/0x10 [ 871.491860][T29048] ? assign_work+0x364/0x3d0 [ 871.496442][T29048] worker_thread+0xa5f/0x1000 [ 871.501117][T29048] ? __pfx_worker_thread+0x10/0x10 [ 871.506218][T29048] kthread+0x2ef/0x390 [ 871.510274][T29048] ? __pfx_worker_thread+0x10/0x10 [ 871.515378][T29048] ? __pfx_kthread+0x10/0x10 [ 871.519955][T29048] ret_from_fork+0x4b/0x80 [ 871.524392][T29048] ? __pfx_kthread+0x10/0x10 [ 871.528968][T29048] ret_from_fork_asm+0x1b/0x30 [ 871.533737][T29048] [ 871.536742][T29048] [ 871.539047][T29048] Allocated by task 4455: [ 871.543357][T29048] kasan_save_track+0x3f/0x80 [ 871.548022][T29048] __kasan_kmalloc+0x98/0xb0 [ 871.552597][T29048] kmalloc_trace+0x1d6/0x360 [ 871.557176][T29048] hci_conn_add+0xc7/0x13a0 [ 871.561670][T29048] le_conn_complete_evt+0x2ee/0x1290 [ 871.567013][T29048] hci_le_conn_complete_evt+0x18c/0x420 [ 871.572546][T29048] hci_event_packet+0xa57/0x1540 [ 871.577471][T29048] hci_rx_work+0x3e8/0xca0 [ 871.581873][T29048] process_scheduled_works+0x913/0x1420 [ 871.587413][T29048] worker_thread+0xa5f/0x1000 [ 871.592077][T29048] kthread+0x2ef/0x390 [ 871.596129][T29048] ret_from_fork+0x4b/0x80 [ 871.600536][T29048] ret_from_fork_asm+0x1b/0x30 [ 871.605287][T29048] [ 871.607593][T29048] Freed by task 5097: [ 871.611554][T29048] kasan_save_track+0x3f/0x80 [ 871.616219][T29048] kasan_save_free_info+0x4e/0x60 [ 871.621232][T29048] poison_slab_object+0xa6/0xe0 [ 871.626067][T29048] __kasan_slab_free+0x34/0x70 [ 871.630814][T29048] kfree+0x14a/0x380 [ 871.634702][T29048] device_release+0x99/0x1c0 [ 871.639285][T29048] kobject_put+0x22f/0x480 [ 871.643688][T29048] hci_conn_del+0x92c/0xcb0 [ 871.648180][T29048] hci_abort_conn_sync+0x583/0xde0 [ 871.653364][T29048] hci_cmd_sync_work+0x22b/0x400 [ 871.658286][T29048] process_scheduled_works+0x913/0x1420 [ 871.663825][T29048] worker_thread+0xa5f/0x1000 [ 871.668504][T29048] kthread+0x2ef/0x390 [ 871.672556][T29048] ret_from_fork+0x4b/0x80 [ 871.676974][T29048] ret_from_fork_asm+0x1b/0x30 [ 871.681736][T29048] [ 871.684046][T29048] The buggy address belongs to the object at ffff88801de7a000 [ 871.684046][T29048] which belongs to the cache kmalloc-4k of size 4096 [ 871.698085][T29048] The buggy address is located 57 bytes inside of [ 871.698085][T29048] freed 4096-byte region [ffff88801de7a000, ffff88801de7b000) [ 871.711862][T29048] [ 871.714269][T29048] The buggy address belongs to the physical page: [ 871.720663][T29048] page:ffffea0000779e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1de78 [ 871.730800][T29048] head:ffffea0000779e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 871.739722][T29048] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 871.748145][T29048] page_type: 0xffffffff() [ 871.752461][T29048] raw: 00fff00000000840 ffff888014c42140 0000000000000000 dead000000000001 [ 871.761031][T29048] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 871.769595][T29048] page dumped because: kasan: bad access detected [ 871.775992][T29048] page_owner tracks the page as allocated [ 871.781688][T29048] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4455, tgid 4455 (kworker/u5:1), ts 123783681963, free_ts 123689684060 [ 871.803224][T29048] post_alloc_hook+0x1ea/0x210 [ 871.807995][T29048] get_page_from_freelist+0x33ea/0x3580 [ 871.813532][T29048] __alloc_pages+0x255/0x680 [ 871.818134][T29048] alloc_slab_page+0x5f/0x160 [ 871.822811][T29048] new_slab+0x84/0x2f0 [ 871.826879][T29048] ___slab_alloc+0xd17/0x13e0 [ 871.831549][T29048] kmalloc_trace+0x264/0x360 [ 871.836138][T29048] kobject_uevent_env+0x28b/0x8f0 [ 871.841155][T29048] device_add+0x648/0xca0 [ 871.845477][T29048] hci_conn_add_sysfs+0xe8/0x200 [ 871.850492][T29048] hci_conn_complete_evt+0x89a/0x1000 [ 871.855852][T29048] hci_event_packet+0xac4/0x1540 [ 871.860777][T29048] hci_rx_work+0x3e8/0xca0 [ 871.865181][T29048] process_scheduled_works+0x913/0x1420 [ 871.870718][T29048] worker_thread+0xa5f/0x1000 [ 871.875387][T29048] kthread+0x2ef/0x390 [ 871.879443][T29048] page last free pid 5082 tgid 5082 stack trace: [ 871.885754][T29048] free_unref_page_prepare+0x95d/0xa80 [ 871.891204][T29048] free_unref_page+0x37/0x3f0 [ 871.895870][T29048] __put_partials+0xeb/0x130 [ 871.900445][T29048] put_cpu_partial+0x17b/0x250 [ 871.905195][T29048] __slab_free+0x302/0x410 [ 871.909600][T29048] qlist_free_all+0x6d/0xd0 [ 871.914091][T29048] kasan_quarantine_reduce+0x14f/0x170 [ 871.919540][T29048] __kasan_slab_alloc+0x23/0x80 [ 871.924378][T29048] kmem_cache_alloc+0x16f/0x340 [ 871.929220][T29048] getname_flags+0xbc/0x4f0 [ 871.933714][T29048] do_sys_openat2+0xd2/0x1d0 [ 871.938297][T29048] __x64_sys_openat+0x247/0x2a0 [ 871.943138][T29048] do_syscall_64+0xf9/0x240 [ 871.947631][T29048] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 871.953520][T29048] [ 871.955832][T29048] Memory state around the buggy address: [ 871.961446][T29048] ffff88801de79f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 871.969493][T29048] ffff88801de79f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 871.977559][T29048] >ffff88801de7a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 871.985621][T29048] ^ [ 871.991503][T29048] ffff88801de7a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 871.999551][T29048] ffff88801de7a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 872.007596][T29048] ================================================================== [ 872.023172][T29048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 872.030400][T29048] CPU: 1 PID: 29048 Comm: kworker/u5:0 Not tainted 6.8.0-rc4-syzkaller-00410-gc02197fc9076 #0 [ 872.040652][T29048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 872.050723][T29048] Workqueue: hci0 hci_tx_work [ 872.055514][T29048] Call Trace: [ 872.058807][T29048] [ 872.061747][T29048] dump_stack_lvl+0x1e7/0x2e0 [ 872.066453][T29048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.071680][T29048] ? __pfx__printk+0x10/0x10 [ 872.076288][T29048] ? vscnprintf+0x5d/0x90 [ 872.080620][T29048] panic+0x349/0x860 [ 872.084518][T29048] ? check_panic_on_warn+0x21/0xb0 [ 872.089631][T29048] ? __pfx_panic+0x10/0x10 [ 872.094050][T29048] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 872.100105][T29048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 872.106428][T29048] ? print_report+0x4ff/0x540 [ 872.111101][T29048] check_panic_on_warn+0x86/0xb0 [ 872.116034][T29048] ? hci_disconnect+0x208/0x2d0 [ 872.120879][T29048] end_report+0x6e/0x140 [ 872.125113][T29048] kasan_report+0x153/0x180 [ 872.129609][T29048] ? hci_disconnect+0x208/0x2d0 [ 872.134457][T29048] hci_disconnect+0x208/0x2d0 [ 872.139131][T29048] ? __pfx_hci_disconnect+0x10/0x10 [ 872.144327][T29048] ? hci_sched_esco+0x336/0x440 [ 872.149172][T29048] ? __rcu_read_unlock+0xa0/0x110 [ 872.154188][T29048] ? __check_timeout+0x184/0x560 [ 872.159118][T29048] __check_timeout+0x3a8/0x560 [ 872.163880][T29048] ? __check_timeout+0x184/0x560 [ 872.168811][T29048] hci_tx_work+0x139b/0x1ef0 [ 872.173400][T29048] ? __pfx_lock_acquire+0x10/0x10 [ 872.178428][T29048] ? __pfx_hci_tx_work+0x10/0x10 [ 872.183366][T29048] ? process_scheduled_works+0x825/0x1420 [ 872.189092][T29048] process_scheduled_works+0x913/0x1420 [ 872.194656][T29048] ? __pfx_process_scheduled_works+0x10/0x10 [ 872.200643][T29048] ? assign_work+0x364/0x3d0 [ 872.205232][T29048] worker_thread+0xa5f/0x1000 [ 872.209922][T29048] ? __pfx_worker_thread+0x10/0x10 [ 872.215026][T29048] kthread+0x2ef/0x390 [ 872.219086][T29048] ? __pfx_worker_thread+0x10/0x10 [ 872.224212][T29048] ? __pfx_kthread+0x10/0x10 [ 872.228800][T29048] ret_from_fork+0x4b/0x80 [ 872.233210][T29048] ? __pfx_kthread+0x10/0x10 [ 872.237795][T29048] ret_from_fork_asm+0x1b/0x30 [ 872.242557][T29048] [ 872.245762][T29048] Kernel Offset: disabled [ 872.250072][T29048] Rebooting in 86400 seconds..